{"type":"bundle","id":"bundle--a30c1f43-9213-5927-a37e-f519f291e246","objects":[{"type":"identity","spec_version":"2.1","id":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","name":"PhishDestroy \u2014 NICENIC Investigation","identity_class":"organization","sectors":["non-profit"],"contact_information":"https://phishdestroy.io"},{"type":"indicator","spec_version":"2.1","id":"indicator--d7151281-3390-5523-b462-13e1ce8b778e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01405f2b-4e28-55b6-9496-ec5d002c5ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f00fabb-8029-5849-9d13-15e2703cf3c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000011-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000011-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21fcd8a3-003f-5380-8c01-d1320d0af2c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000012-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000012-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f642fef2-be9b-5d08-8700-306d32c5b21d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000013-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000013-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea233366-5a1a-5ef9-a65c-a329b96e8dc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0001-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0001-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2b8e5-e931-5c87-9323-011e8e80bada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000414-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000414-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49eef797-eb5b-5412-a830-029460299969","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000515-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000515-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f364f0-2569-5552-a60c-9e85e7357508","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000777.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000777.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b02287dc-830c-5efb-aaca-bfe5033366b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000818-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000818-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d88a0f7-67b3-50cf-9dda-3f1a83f1fafc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 000919-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000919-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac15725-54b7-5ea2-83d1-d1011041cc0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 001-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cae814-ea67-5b80-97cb-f8d0c0f32623","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00149763-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00149763-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92cf1bfb-b367-5490-b796-973870c289da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00176519-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00176519-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89086545-c3a5-5049-8d2e-02ceb684b0c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 002271coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '002271coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a892fe41-3afe-5a6c-a4e8-9a254b350dc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00284193-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00284193-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1f0597-fdc5-5120-8276-c96bb2f74cf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00294873-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00294873-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a38a6c62-0d60-5fa5-bf69-bd67b17c2827","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 004925coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '004925coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fdc0d2-c2d1-57cd-841a-08c4d0534db8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 007401-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '007401-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4b48cdc-ab5e-51e9-a171-1d93561ed48f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00792869-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00792869-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd2ed77-f9c3-5bbb-b6aa-7240bdc37d00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00813926-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00813926-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae08c3dd-9e32-5f4f-be71-f6fe5336aaf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00872149-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00872149-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a96d5d-2756-5d0c-b5ee-727319285d90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00891463-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00891463-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d998251-71ed-5c00-985d-74ca54e3e946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00891741-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00891741-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82712bff-5143-5a47-8809-7cd4143b9135","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00894182-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00894182-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce45b175-aec3-5954-9a7c-d1ef6e960f00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 008ogwe.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008ogwe.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a16827-1b2e-5487-8dc4-16938a737b64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00952178-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00952178-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8761e52b-0dd5-5368-9646-c78dcc338150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00962851-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00962851-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b37eab-d13e-5cdc-80b1-5e25e7b424aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00971539-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00971539-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbefd75-d4e6-54cc-8cd8-da4cb3050a61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 00982541-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00982541-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551c8deb-5a4c-5848-a755-08098b4af952","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 01-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76cf0a2-9292-51c1-91fc-bebaf1e0e94f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 01-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c902403f-af7d-5211-803d-8b8d275ed17e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 01044marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01044marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36333afa-d209-57a8-a1b7-9104a0760a5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 01281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6f310c6-6095-58b8-b26f-4e4de6677730","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0132.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0132.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d456975a-6505-5253-9323-b9398f691022","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0182-citizensmember-auth.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0182-citizensmember-auth.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9989fe2f-6d0b-5919-91a3-f86f32ff6ddf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0182778-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0182778-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98664154-c489-5283-b2ea-7c22dec10b0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0182778-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0182778-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--647c0453-eaf2-56a3-8b95-441734f22f42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0182778-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0182778-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea38f5b-e5af-57f1-8bca-418df729144e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 018738774124.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '018738774124.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa647e3-0628-5c68-9846-2eaa978430e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 018999-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '018999-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0dd38b9-528c-5b0c-a493-34d338f705a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 019-td-accessauth.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '019-td-accessauth.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88d9e1c-8651-582b-a89a-6421737b3321","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 019511-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '019511-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db92826-f048-5cdd-99f0-069ae8fc16b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 02-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57af3423-4763-50b4-958c-7fe0854ce8f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 029837-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '029837-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0c1930-345b-5f14-adac-2901558417ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 02auth-idveri.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02auth-idveri.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f66e0d8-b910-5b23-be0a-22e141914995","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 033027coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '033027coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad3a73b-4b2b-587d-b6f9-2ded3ecdfcb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0345-auth-gateway.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0345-auth-gateway.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8f22bb-cca2-5732-94f6-b3a2a080a6a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 03982-postbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03982-postbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61aed2f9-9d09-5ce9-b68b-5274f633794d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 03s30.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03s30.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--779cca5c-a1ed-5d36-8683-c1196505b895","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 041413-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '041413-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb33e54-2641-5505-983c-ca47ef5c850a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 047352-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '047352-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9d38de7-a3dd-5b48-bee6-83152bc719c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 050c4f9cfee6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '050c4f9cfee6.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b6a14f-da70-5046-8f53-c04ade2b8441","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 055262coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '055262coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a60344-0630-5dda-8db5-718729d5efab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 05e157655577a4ca8ec5377ac70b1b9b.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05e157655577a4ca8ec5377ac70b1b9b.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848f430d-32eb-5863-a60f-d87fab45aa37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 061844-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '061844-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e381f57-e1fc-5d17-9ae9-b3054d0053c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 07-30.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07-30.cloud']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9644849a-4cc5-511e-9aa8-9ba7efe06b89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 07-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dbcd6e8-9761-55c4-a07b-f503301bfb1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 070900coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '070900coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ff6232-0b11-535f-8d18-1bdcd9314a39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0725-xfinity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0725-xfinity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdef33b-e8e9-59ba-a597-4e30353d5cd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 076261-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '076261-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c546d899-14fe-581d-996b-0f2d98b20e94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 079c18a7f90d567f40510c85a441e35c.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '079c18a7f90d567f40510c85a441e35c.cyou']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb28568-b2b9-57fb-9dbe-bbbab7d1acab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 07revnucdagnc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07revnucdagnc.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f3b5d71-b1d3-5970-93aa-c07bba241eb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 081293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '081293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c2c0f4-b132-51c1-b3b2-4baef8ebdf50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 083116coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '083116coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a122f00-0c6c-5e05-8307-8b3fb33c1b01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 083924t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '083924t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af0844c-16e8-59bf-8241-d36b66155b43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 087tvacreditunionaccessauth.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '087tvacreditunionaccessauth.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8259a57-c2c0-51fc-9ee9-a5184e50eaa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 089166-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089166-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f413b320-9a9f-579e-b454-abf3bf14bcde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 089166coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089166coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c934ce11-c49d-5574-a466-27dce9bb2dce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0894marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0894marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47148cb-ca4a-525e-b026-cc1dac2514cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0897b42949c391ac26a68c6b47f5362b.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0897b42949c391ac26a68c6b47f5362b.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef65f4e8-2963-5da6-81b4-7698b648e940","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 09-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47807e43-6017-555b-be3f-69e2a8712df0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 09025896-secure-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09025896-secure-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02eeb87b-bf85-54ee-a953-68c48ab1f94d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 091731-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '091731-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--235b55cd-970b-51c6-a619-09f6dadec9e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 091837-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '091837-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d29a250-ec77-5379-92f3-be0a2f2bf29a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 092301-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '092301-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--757eb41f-0010-5dc8-a1c4-8972a98770d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 092813coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '092813coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73cf955-c5e3-52ad-a432-1276345da130","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 092854-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '092854-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65259d45-f9fa-54fc-9579-54d5870bccb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 093817-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '093817-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f694986b-3b7a-58e7-afdc-5477487b3f93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0938172-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0938172-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bcfb06-d0c4-5ded-8a53-7ee2bf70f027","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 094302coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '094302coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73242771-1314-53df-ab85-c5498321c0af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 095-huntington-identity-verif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '095-huntington-identity-verif.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--410d5674-9827-53b2-a359-5d5ac55ca439","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 095110coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '095110coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777e6317-5949-5697-9822-4ea3c8ea19ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0951lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0951lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ccb363-5219-5727-af24-f9cee1a506f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0959193-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0959193-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8b23fd-c177-5444-bde9-a2c37ed71c43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 098122google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '098122google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c99f779e-bf73-597a-b006-867f66fcffdc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0auth-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bcbf09-4746-57e5-abba-fe8d6b276ec6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0auth.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28153bd7-415d-56b4-b17e-88248efd7ede","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0authefile-assessment.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0authefile-assessment.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe104ffe-9e3a-5380-81ae-beb9a9352ae4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0bulk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0bulk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0302c9-68e2-5eb3-a60d-09f31135741a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0d635129da68d14886b263b269fde845.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0d635129da68d14886b263b269fde845.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138e751f-e23e-5cc4-8c1c-861b81a3628e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0f0b5ace14ccdb0a7064e8af55406877.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0f0b5ace14ccdb0a7064e8af55406877.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee05927-fec0-5d32-bbb4-693df9cfc8de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0fflclalraydiumsoldapp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0fflclalraydiumsoldapp.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76dcc4d-e1e6-587e-b51a-518ea1cd311e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0j8k.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0j8k.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e0c6e7-3fcc-5871-a637-40796a4474bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlforce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlforce.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5f3470-f8ca-56a6-a160-5768520d89ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nline-assessmemnt041.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nline-assessmemnt041.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8028b723-71b3-5695-8bef-126776788de6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nline-assessment.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nline-assessment.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25913611-934c-59bf-af6c-3a4de5f37246","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nline-assessment0311.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nline-assessment0311.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84bebb99-175d-58b8-9fd6-d1b53d345538","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineaccess.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineaccess.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d64130d-b357-57c5-b0e5-ed397297465b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineact.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineact.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea1b484-ae37-5f8e-9054-d23698306abb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineaction.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineaction.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d8334-af9f-5943-9f7b-d81ef91bf1ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineactions.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineactions.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70e722f-c2b2-57bc-839e-0fdae572c0d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineactivit1es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineactivit1es.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb203c31-4d19-57f5-81e6-bd013d1a8794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineactivity.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineactivity.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8447b5-0937-5378-9c22-b30d578b7161","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineaid.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineaid.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df912340-ad0b-5b40-ba8c-76021db5a101","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineappnab0skocancellatlonportal.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineappnab0skocancellatlonportal.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e5ff60-a3c2-5816-9b8b-24c6b981a5af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineassessment.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineassessment.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc05f45e-3821-5449-a4b2-4502c315be21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlineassessnent000.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlineassessnent000.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f76f125-e619-53ec-a229-1a4cf4deb750","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinebmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinebmo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0ad37bf-d3c6-5daf-85ff-0c2653ac5d51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinemessage.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinemessage.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75eff5a-2622-5f24-ba9c-6e3a1cf3ed1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinemessages.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinemessages.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496d5b10-b06a-5392-b89f-15510874915b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinereference.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinereference.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b234db4b-8c86-5ff0-b784-65fb0eb3079c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinestatmentsubmissions.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinestatmentsubmissions.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4e185-0be7-573a-84a6-d2dfe8051037","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0nlinetasks.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nlinetasks.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4156c7d-05eb-5c46-bdd0-5697b6bf1dd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0p3nsea-web3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0p3nsea-web3.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4154a747-eb8e-5cd2-9e62-de33009e6516","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0qs4b4his2.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0qs4b4his2.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a48dc4e-eb7d-5da2-aba2-eccb595da9fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0rder-check.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rder-check.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bf2a11-a733-5250-9532-e572f5c5576c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0rder231591.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rder231591.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ccfe39-7325-5fba-8edc-989ee2a37e56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0rder72827-ebay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rder72827-ebay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791b964b-f4ff-5f6a-8656-f99e14f852e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0utvhjsservices0511.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0utvhjsservices0511.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f087d2-c835-5258-a80f-8ed2303b0a0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0verview.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0verview.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a45bab20-239f-561e-bc05-9a6cc3793741","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x-altseason.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-altseason.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e8da33-c6b2-559b-8623-b234de99d8c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca273d68-3c4e-5a37-a33c-b22b06917df2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x-distribution.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-distribution.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee5060d6-de86-5809-a60b-585a85597030","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x-v1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-v1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8357b9-ce6a-592e-92e4-abb6e5b4788f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x-v1.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-v1.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da94fc81-f464-54fe-ac5a-02f4b55c6560","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x00-claimables.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x00-claimables.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b19538-bdc3-5429-9c2f-ebcf31cc5bec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x000-claimables.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x000-claimables.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e0d20e-befb-57d6-b1ec-1864c2844bd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x0000-galxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0000-galxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--088a6192-61bb-5621-bd20-a816189d2919","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x00000-bankless-hunt-airdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x00000-bankless-hunt-airdrop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58169f44-e2c8-5566-a35d-51b113423e6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x00000-galxe-compass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x00000-galxe-compass.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54c0d512-63ed-5ce2-9b4e-99617f4968f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x00000-galxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x00000-galxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--872e7f82-f16b-5ca8-b22c-59cf122fdf99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x000000-galxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x000000-galxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d5f2afd-8773-5e75-8171-b27cf7571b4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x0000000-galxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0000000-galxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cefd4cd1-5721-5d75-8e50-182efb835df0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x001-claimables.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x001-claimables.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f69f3db-112a-5b0e-8138-15232276e3a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x0ai.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0ai.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3fbf23b-d9a6-5113-b271-ad63ef1180b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x0ai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0ai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530a87ed-a43c-527e-bcc6-a363b978280b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x504.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x504.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32337d3e-fdaf-51d4-b005-bb4b0d80766b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0x845845848d8s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x845845848d8s.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b3d1c4-a0f0-5f02-8350-612ab02f2398","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xbabylon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbabylon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31373cf0-7af5-5963-8d3c-e95f216a19c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xbox.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbox.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48bbe81e-507f-50ab-8ff4-3408cc534d3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xburner.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xburner.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f7e867-1323-563c-9abc-9ee470a5e580","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5281cdc-9208-5268-bac5-d10d7604a781","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xhares.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xhares.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d280c1a8-a28e-51bf-a6a2-3be9f36cc1b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xrew.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xrew.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69bd9105-1275-5151-b5d6-d76f9c2bab27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xrewards.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xrewards.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5304f973-3cb1-577e-bcb4-5acc6b5a08c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 0xzerebro-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xzerebro-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c7a29a-9e50-5e0d-b6c8-efe3e6c8d4cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-888-608-7975-scotiaonline-auth-scotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-888-608-7975-scotiaonline-auth-scotiabank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d96a62-b5a1-5217-a2f4-7b492b85ea47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-canadapost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-canadapost.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad409754-5aae-5ce4-a7c4-c6465ea96443","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-casinoroyalcom.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-casinoroyalcom.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--252c4440-d2dc-5029-8bd0-d0d5c7f12eca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab54fbcf-a2ba-50f7-a022-1fef87ed6d6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-line.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-line.cloud']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7784275e-8625-5f99-8cc7-31a66fe4bdf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-line.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-line.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3edbdcd0-4f53-544d-9f17-e04a300559b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7fdd15b-f969-5ec7-9dcd-4cdda68b01c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-lunabetr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-lunabetr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5489eae-4529-5027-ae9f-cae523311bf9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-rbcroyalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-rbcroyalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f26adfb-01be-57fc-a651-9ceeabf5cecf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-royalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-royalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7031f21e-e07a-5acc-b2d5-5789e27bbaf7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-royalbankrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-royalbankrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63a01c8-962c-504c-a417-1bb92784d617","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-slon.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-slon.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e82569-90a6-5920-aaeb-618d592f89dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-win-kz.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win-kz.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7d2429-9ecf-5942-9d11-2e6edd04fd42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1-win-uzb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win-uzb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb922537-0b58-58bc-8284-96153d120b04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10-07-pasiaugos.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-07-pasiaugos.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6557e1-e4ae-5a40-af63-8d52569c2f2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbbcd0bd-9fe2-58ea-a47f-2268cfd0d07e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 100051coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100051coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb91f41-1a2e-5798-9849-ac4a9b394c8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1000easy-level.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1000easy-level.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb44351-99f9-5afe-bf7b-da70737fc7df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1000piabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1000piabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75125aba-9926-5fd9-8f88-726021a0b1d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 100150coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100150coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cadf209-22b2-5ffe-8ff9-ac4e3199b167","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1001lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1001lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4138616f-f19e-52f0-8e88-7d0f069e53db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1002queenbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1002queenbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf43615-2858-58e2-b7e8-351c6f1e2111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10031marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10031marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d166797-68bf-598f-95de-8b30919afed3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10037marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10037marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845e06a4-fc37-546e-9c05-8464f127ac04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10038marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10038marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--381d7435-f0f1-58bd-8bf4-21ed4c52c4f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10041marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10041marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ee5c61-b91c-5c3e-999f-df86dfb0f2fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10051marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10051marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45e2f0e-dffa-5355-845c-7bd35e72c723","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10063marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10063marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea47baf-9c49-519a-b71b-7d7568662b2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 100cuciplaymy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100cuciplaymy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e34bbde-0c2a-5d66-b887-e7ce1f8458c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 100procentuptime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100procentuptime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--132201ee-8cdc-5334-b1d6-85b9577ac7d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10101bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10101bets10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f506cd8-cd14-517d-afda-35de2e3921f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10102bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10102bets10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb206dd-0d7a-5360-9a05-303deec4eb1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10103bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10103bets10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77574aa3-4c56-5058-8e35-693868524081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10105bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10105bets10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3e43c8-29bf-5c1a-afd8-66b6c531d274","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1012lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1012lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9632e78b-f97a-5844-ac8e-e9ff520121b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1013lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1013lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc4cf40d-baa7-537b-bd68-515e3ebbbff2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 101493-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101493-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--463a17b2-6cac-554b-803e-8a386936ecf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1015lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1015lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e6b35c4-fc1a-54b5-ad0d-93829fdd9c88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1016lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1016lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4239242-a9e8-5095-865f-5ecf2b6138aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 101861-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101861-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60412ff4-5dc7-5b58-9c2d-00a68ce71823","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1018lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1018lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825f1e1d-8e12-5423-b6e8-d76eeab04aab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1019lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1019lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50b417e-06c8-59a2-8e8a-2b709148cb62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacdd3c4-71e3-534b-9234-ffc1c524cfed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1022betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1022betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abac0482-be98-586a-9dbf-ea45d1836200","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1022lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1022lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a74e787-ca99-5a80-96c3-53475c24d920","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1024betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1024betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9489b7-fd3d-569d-ba58-e52039760601","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1025betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1025betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6c57a0-53a4-556a-af81-c6329ed2e26a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102660-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102660-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20024d0b-f2cf-59fc-a0ff-0dfcf1275e40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102766-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102766-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--498a968a-1d97-54e5-9019-9a140e7a18f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10277-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10277-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc8a7e0-f559-5b74-bcb1-7d0c156a9a79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1028-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1028-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2325e6ad-a929-52c3-aafb-bd63712f76e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1028betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1028betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a9dbc7-2337-5227-ae8f-92a0e2ec192c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102912icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102912icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc33ee3a-ef78-5cc6-8499-8603b6cd5266","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f27efda-e7e6-546f-8d35-12f7b433abd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 102929-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102929-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01cc60b-f1c9-5a70-ac59-7830fbcbf981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1029betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1029betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b806999e-d58e-5530-9e11-4704880387de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10340-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10340-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72610c5b-581b-5675-bb16-3ba87d2e9dde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1037betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1037betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4cbcf2-a88b-5ad0-9b62-ade94e33ede7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e6f30e-33b6-5ed4-81f6-806e34374538","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 103828-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '103828-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c478b105-4c3f-57b8-98b2-4f43d82b6eeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 103829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '103829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78136178-605c-5dee-a6da-e25040db57b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1038marsbahisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1038marsbahisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f7756bf-70a0-55fd-8da9-8befffd65542","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1039292-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1039292-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4cdd28-73a4-544b-9ccc-be0fd7202633","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1039295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1039295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af97d916-ab1f-5e53-9087-46a65ca6b829","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 103985-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '103985-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee63e5e5-bfc6-5588-bffe-644500986029","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1039gobahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1039gobahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1694de0-ac1a-57d7-8e4a-4917a18c5beb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1039marsbahise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1039marsbahise.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d89341-04a4-505d-bd9f-2ab435082f7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146710bb-85ce-52f3-8538-a68b04a91274","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104365-ticket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104365-ticket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1dc30c-9417-56e9-9d8d-43a4ba6a014d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1043842-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1043842-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7935f50-84c7-5fb3-83d3-accc35ecea92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0226211a-2d20-57c2-8500-ee662b579c37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba6069f-643d-5eb6-a3a8-c50db353c396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10460marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10460marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf66bd9-e3eb-51dd-8ddd-66d6463957c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104839coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104839coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dc46d0-2ce0-517f-8a81-a65d469d7a01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1048592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1048592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b044e36-49bd-51ec-be39-70d7c84244ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1048madridbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1048madridbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68cbfdb2-00c6-5087-b09f-7afeeee1f067","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 104929-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104929-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab43d801-169f-5c7d-bd4c-cb18b9d236f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1049298-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1049298-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea848a6-b453-59bb-8ea0-a11bd4af136f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105003coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105003coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1754070-4aaa-5b62-8ead-25bdb904c02e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1052954-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1052954-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5737703b-5355-5ca6-9aab-d07f9deb0060","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105377coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105377coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0600085-bae4-521f-b832-25cb962c9013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105524coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105524coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00da3110-94a1-5ba8-b114-84d5dab6c7ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10579-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10579-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d23be8-ef31-5858-9f4c-3832e1768524","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1057lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1057lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b412c25-2342-5234-b77b-8303536515e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1058294-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1058294-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7e9dbd-ba65-5951-aae1-e81a5b089e91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105882-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105882-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ce07d8-47c3-5de1-b72b-ffc0fb906902","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105915coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105915coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd715f37-fe7a-54b8-ac24-b40102ea18e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 105996coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105996coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db930d95-ccb0-57e8-9eaa-3ccdcd585def","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10610marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10610marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62094a1b-cbba-5e75-8119-b0b587165d8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 106304-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '106304-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9a81e8-81ea-5098-97bc-4e34266b7e69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 107389coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '107389coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75986a0b-83a3-54ac-a9ed-665f7a665c1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 107524-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '107524-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa97a379-a207-5734-ad39-4a6e835f5b41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 107864robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '107864robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd47bb7-c77a-5f98-a663-90b312e79383","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1078lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1078lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd0ee08-c7a2-5c09-9992-fa17ac9b45ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1079lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1079lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1193b4c8-3c87-5d6e-8bbe-143ae1627121","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 108122-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108122-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5dda38-7827-5b5c-93c6-ab564366ef1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10820marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10820marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ed1754-17e9-5056-aefd-856e99df9505","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1083-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1083-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ec50ef-ac77-5757-8028-06323c831f9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 108419-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108419-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78987803-05db-5684-b8de-8260c4cdd2ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 108738coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108738coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849c4af1-44f8-5380-9a09-6f98c82faa89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1087betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1087betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bd7b32-49a4-5c0b-af60-66e44a923148","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1088betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1088betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ba1de5-7637-554b-9fc3-deeb90e51d05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 108ulrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108ulrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c40d216-0a51-5016-9e52-1a243759d752","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 109281-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109281-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0721cc1-f42d-506c-8bfd-9db24fdad7f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 109283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151fbdda-ad25-5ec6-944d-f9812346f724","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1092betwoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1092betwoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f45189c-6e49-5c53-a30a-7a43b5b555a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1327798b-ce53-5e8d-a2b8-13749380eeeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10940-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f8da8a-cd52-5cab-b668-b9364c64972e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 109493-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109493-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d956af5e-9bed-5098-a4eb-0a57e47d6e2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1095setrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1095setrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67268a80-4333-555e-8d87-094d261fab6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10984-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10984-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a58b1b0-66fc-5ae9-ada9-3487d51fe822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1099-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1099-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c38f533d-b207-5595-98ec-c757debe2be8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 109952coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109952coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4facec-d4cc-57a3-9db1-3d17b18b9c77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1099jojobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1099jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab89c235-3205-539f-b83e-088e8be4b224","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10betturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10betturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1525ea-8417-5b40-b829-03787c8d37b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d490f89-08db-548c-851c-0d524a01c107","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10mbeforevaientine.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10mbeforevaientine.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb93529-2c3e-5958-a2cf-08b0c1c2d8d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10parimatkasiinot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10parimatkasiinot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1212a55a-967e-5996-920d-0ec73c7d3d06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10thyearofeth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10thyearofeth.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02678563-b0c9-5e38-89c1-c8f1490c40b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 10yearminting.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearminting.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187be636-58fe-51f9-bfd8-29c28bb47cb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a5aa98b-b6fa-5326-9420-5a42a8ecc9b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e532eab0-5cc0-5d20-9e3f-fa4d30d8f241","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1100romabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1100romabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2637a953-1650-5b5e-8ca7-d264a8c6933c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1101romabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1101romabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bceda5c-5217-5c20-a108-4fa32d9a1e16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 110353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '110353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d91086-46d6-54ef-ae5e-e92a49333651","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11059marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11059marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcd5b65-7dd2-521b-81a5-a8066359c0c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1106marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1106marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a82e96-eb8f-5397-bfe8-9f248ce31aac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1107marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1107marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3183932-b21b-57ad-8ab5-0a9a91c6f17b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1109marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1109marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18abf4ef-139b-510a-ac5c-eb677b9b71c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 111403coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111403coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4f5f69-2b99-5f12-a160-40a585b7ad06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1114betasus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1114betasus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e216bbfa-ef7e-513c-8b1c-93c7bd6b0ebb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11151marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11151marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a34679c-133c-5a5b-943d-0e61e047e49d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11156marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11156marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6067f873-dfee-5ef9-b5fe-dd6da70df8ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11158marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11158marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6076ab58-3b0b-5bb7-82e0-4b346ea25c04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1115casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1115casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54248dde-5e7b-5728-a075-96e21376b48d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11161marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11161marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c432f5-8784-5d23-8d01-c13bcf86d951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11162marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11162marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e636f644-91de-5719-9742-18425326a77b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11163marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11163marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c0cad1-7e5f-542d-9ebe-f38cda833a6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11164marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11164marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efeaeb83-16ab-594f-9801-3718dce17734","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11165marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11165marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16d2e3-36c1-5ef2-a3d9-f8e4f81ea689","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1116marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1116marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b5c6ea-0b95-5c71-bf1b-51700635d6de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11179marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11179marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f723bb-a2ec-576d-b195-4aef00445bed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11181marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11181marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03463e7d-4dcc-556f-9d2b-3d9dd382ccb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11182marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11182marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e75a4a2-9777-57df-8268-accdcd8ef87c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1118casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1118casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ac023-2571-5f0f-9b31-881e0fdd3879","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11191marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11191marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b35fb4-f11a-5904-8d66-1a1652da8c20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 111movies.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111movies.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224c9f6c-1b9c-56dc-ac79-84875ce2e2d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3557435b-c52b-5304-bb32-e35d33a66a8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1124ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1124ultrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09487481-6378-5ee9-95b4-b5835ec4274f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11250marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11250marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a570d7ff-8107-5889-88cc-170c18ac070f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112581coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112581coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc18f13-3a28-570d-85f2-c771ed5e52d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112582coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112582coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6627b4ff-1d80-5f34-bcd4-e8f53143200a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09eda17a-8ba3-5b86-b951-37516fae823a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112584coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112584coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23216f1c-a358-5d08-a6d4-ac6c01124faf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112585coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112585coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf11c841-eeed-55f5-bd40-71b12c71cad2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112586coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112586coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bbaa870-197c-50d8-8078-6c096a3e8759","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1126368-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1126368-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2447ed50-8771-5de8-a108-904dea38bd07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1128627-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1128627-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4103b0a7-0613-5bd5-9ab9-cc52c45b7057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1129coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1129coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34aed8f2-d916-5f87-be79-c67530e16e4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 112coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '112coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c822e3-7a8e-52e5-a786-28af042446e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 113268-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '113268-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49c3c54-1df4-58c1-90df-43185f46b207","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11340598crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11340598crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b03121f-7cc3-5087-acd2-eed49c28d873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 113841coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '113841coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d49751e7-cc00-553e-b09c-a6f308cf84a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11391-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11391-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a58b200-ad67-532f-a886-1bac2f125403","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 113969coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '113969coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df505f5b-fdd1-5130-b3ca-abf58dbba722","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 113982coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '113982coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d74e2f7-9888-50cc-85ef-9f8256e01e50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 113983coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '113983coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b0ffe6b-72e9-5ba8-9d71-e7692e6420b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1139marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1139marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d8daeb-e3e6-5adf-a3fe-d7f30b298e53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114128-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114128-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ead8c1-285b-5c29-a3ea-b427a3c0d50d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1142891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1142891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff70fcd-bea9-5254-929f-bb179bc9fc99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114295coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114295coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bdb98cf-3610-5f08-8e99-70085b7dcb2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114296coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114296coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc3eb743-222f-5151-b728-e2407d0202cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114299coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114299coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a6ea96-9b2f-50af-90d1-5c882b6d6f93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1143marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1143marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb9dde26-7c57-55d0-9155-c55cb02d3649","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1144marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1144marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee221c3-aeca-5c32-94a2-d241ee762a29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114514.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d632b8af-a750-515a-9513-b73325cfd822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114514meme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514meme.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9447283-0235-5a53-93ea-b9870ec56302","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114557-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114557-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366de97c-4c2d-5ab7-b454-edf192b097d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114587-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114587-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c766ecf4-04c0-55f6-98a6-89189b88baad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114588-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114588-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fe11194-bfc5-5bab-b57c-90bc15247b11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1145980coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1145980coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94dacc1-42db-53e9-af47-c9b26653401b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ec67a3-9232-5cdf-8129-470dc2974225","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114857-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114857-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7718d688-e5e3-5171-8544-f0bd14cbef6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114874-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114874-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c960fcdc-5e2e-57f3-9522-f4e5e10c05bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114879-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114879-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab2bf61-f1a3-5dd9-8c06-9fb3b35506be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 114880-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114880-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf1d9d2-2183-53bc-8d09-5fe49bf864c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1149betebett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1149betebett.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147c108f-9b5a-5fa7-9b98-15d86cc6b242","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11501-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11501-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65701fc2-47a5-5e79-bee5-1e9e10f30b77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 115067-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115067-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e514cc3a-a3e6-5311-b85e-e0130027dce5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1150cratosroyalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1150cratosroyalbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8f8def-27b7-562f-ab9e-f688d0886b9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1152ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1152ultrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7838b97-463d-5642-98d6-cee9dda5b863","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1155410coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1155410coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0261aa-426b-53fc-ab4d-2732b03d68e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1155410google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1155410google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cd7774-ad71-5ccf-8e52-124c2c995c6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 115591coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115591coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c39354cf-4ea4-5014-96dc-fb5530eea2ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 115596coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115596coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15db27d0-5215-56fe-847b-fc9744774d4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 115604coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115604coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--307505a9-f39f-5767-83ea-789bb4d576cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 115piabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115piabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbd05e6-c259-5dee-adad-9b8ecd7c70fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11627168-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11627168-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fcc17a6-78cb-5652-80b7-265e9498f721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 116287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '116287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bff1ce2-18e7-5231-a449-b83b9fd6c58a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1162891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1162891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a90be01-1cb2-5fba-9d06-e16642322ab5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1163marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1163marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc2deb8-8062-5109-a34b-5fbcb0b628ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1165marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1165marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263736a8-3ca2-5bc7-a77d-ccac7936db1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1169marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1169marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f94ee8-a7a9-5423-acd0-c2531ac30bcb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1171betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1171betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b876a759-d509-57c1-9a47-d7f120f419f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 117372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '117372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71b804e-c8ae-56e9-b4d2-b1e5d41c4f80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1176marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1176marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a18dfb4-7088-59f9-ba76-c129243e9b46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11785marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11785marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1155db0-d886-5d60-b127-4dc8182ef562","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1178686-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1178686-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69d53fb-f656-5d39-bf82-d6d3e276a6a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11786marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11786marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc785cf-2477-5d72-a005-925e25568950","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1178truvabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1178truvabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b900e099-b977-5795-8c48-ef16eabee75c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 117949coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '117949coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4750da-f4f7-5b80-ad7e-001ec37ab6ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1179safirbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1179safirbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3367c23c-c867-5422-8ac0-b024207816d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d4989e-70ba-5714-93a9-ef00309af5f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1182627-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1182627-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23016f1f-2e89-594f-98a5-7197d91ab810","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1182lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1182lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573de17c-b054-5005-be84-625aa36c1da4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118324-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118324-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429e2c2f-2e88-5cb8-a81f-ecdeae2d939d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118428-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118428-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcccd40-0c0d-552c-a0ef-e88619950689","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118624-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118624-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfad1691-ed58-5f98-bde7-f2348f20a8e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118724-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118724-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9703c1e6-6c0e-5c1f-a96c-382194ff0652","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118906-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118906-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--524fa204-f7ef-5722-b911-96670766e4ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118924-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118924-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ee66af-8ef6-5d1c-b5aa-2b3634cd0111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118924-cbvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118924-cbvault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27085c8d-6039-5b33-a7b4-3385f9ee3a02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118924-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118924-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a55d444-8eb5-5919-90cf-c11258a3a108","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118924coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118924coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ebfec1-ba7f-5225-805a-c7f5ba629472","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118925coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118925coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f916f396-6264-5066-9f90-137f411645f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118926-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118926-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72f51eb-9193-5250-90a2-e93a7ab27310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118926coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118926coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab169f7-0f29-538e-8436-97a61dbbb3c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118927-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118927-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a127d27e-d221-5ebf-97c5-1022f42a4afc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118928-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118928-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b210c32-ba43-559b-8391-7c52dba7c02b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 118930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed7b991-1fc4-5617-bedc-bc2db40668a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1189jojobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1189jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e7aa5-f32b-57b0-8741-0aa8b0e3bc88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1190lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1190lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc84795-abed-5749-85e2-7fd068c58ae6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1192betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1192betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--958b5fc8-e3f2-5439-a97c-bc82d1fd29c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a711c28-6396-54ce-8109-07bc2f3b38e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 119332-wealthsimple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119332-wealthsimple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46daf89-a92d-5ebd-90e9-9ab9274e359a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 119414coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119414coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcfa9ade-7c79-5e3d-9e73-fc91628973c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 119415coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119415coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859bcdbf-a67d-5cb8-b491-b103ea739de7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 119442google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '119442google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25c0854-7357-5496-beb5-e399bff2ea24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1194marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1194marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b324f2e0-97db-50fc-8ada-e9eb63756082","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1194perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1194perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d6dc82-bbaa-57bb-aef4-3b3e562aaf0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1198marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1198marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e36faf8-3dc1-538a-a2ad-4a17f1a2dfb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11am6-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11am6-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b712e5d0-728a-5831-a1e5-d87db9e56a1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11amaswap.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11amaswap.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887de33c-e2f5-587a-b532-84bce8b5f14e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11amawsap.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11amawsap.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d931d6-0705-5889-a0fd-95a166315bd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11gram.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11gram.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfb8237-4cae-5e11-a639-77fb4260ee5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11telegram.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11telegram.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c919c989-322d-559e-8ce9-8d7a28c231ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 11yekn7-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11yekn7-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc1b40a-8b00-50a1-b0d9-25604f153132","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12-07.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12-07.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5238d8d-0182-5403-8755-f0d499d71031","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8dc4712-c3d8-5e76-9aed-4424ae4b748a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12-x-wealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12-x-wealth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb51355c-305e-5e13-9a8a-0db466875c5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12015bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12015bets10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a10b49-5914-524f-9636-05026a9d7d6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 120883-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '120883-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a77dd7c-2a0b-56b5-90eb-b448ba7ad556","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1208lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1208lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--308db3b2-a995-5eff-b37c-9fba4acfe2c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1212betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1212betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b0c5eb4-640b-5893-8ece-bc4cce87add0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 121355-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121355-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ab4df8-53a4-58f2-84a2-dc7261a7a705","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1213betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1213betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b14bb30-1463-5477-87b7-3602241f8570","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1214345-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1214345-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24195625-a7ab-57f1-9a5a-cc6319d0c06b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1215betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1215betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49532657-3252-5cdf-83b4-1b07ae3a3a3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1215marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1215marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61e8dd6-23b5-5bca-a379-2e8ccbc35cbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217313-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217313-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--901beb13-a5b8-55e5-85aa-44987186ace9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217313-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217313-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c884d8e-2d32-57b7-a564-5af86c858d27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217316-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217316-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e52e7-5ec0-5ee1-b812-e86b42bc7628","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217317-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217317-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f658393-a528-5f84-929e-599818727a91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217318-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217318-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59466673-35da-5627-b05f-14657333f12c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217318-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217318-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--964db4e8-30f7-51c3-b1da-1c5930d698d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217941-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217941-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d449d8-8ed2-5c2a-8f30-bc5dc8c4e06c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1217ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217ultrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb439aa5-df10-5e2c-8960-27ab3b249897","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1221650-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1221650-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46812ea4-e0dd-5c6e-9c92-cd900e5bfcf5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1223-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1223-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5b516c-aa86-5445-9dbd-b52c6ab5ffa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12276-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12276-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c968a8-ed4f-5917-b944-1b6aee679aa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 122795coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '122795coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352388e9-b406-59fd-891a-e689902dbef9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 122904coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '122904coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73b8da7-0f13-5bbe-91a9-f083e714e848","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123-knab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123-knab.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa797aed-4bf0-5ed2-9336-8d42b72143db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1231129-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1231129-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f97c68b-4fd3-53f2-8db3-d33838686641","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123334-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123334-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--829a3fa8-1b3e-566e-a6f9-5f4a00766193","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1233perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1233perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bd546f-21a3-528b-8082-7b447e944c8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123446-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123446-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0ed30b-e6bc-593f-b9a5-df54d7e7df18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d547f4f7-ce9e-5cb2-bf1f-0948fbdf6ee6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12346-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12346-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b83d52-c258-593d-8411-faff40ccf3b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123477-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123477-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec38b20f-7077-5bdf-a0cd-992a25c50a36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1235marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1235marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3943a1af-1ee5-5c95-a2d5-fd9225a577e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1236marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1236marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d06314a-7c8d-546e-a6f0-d6d9e93bedcc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1237marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1237marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c96f5dc-ee53-5abb-969e-59d861d51724","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123818-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123818-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbb8a3d-779f-5a22-a922-d2bd4743ae37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123819-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123819-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44b2dfb-5dce-50cb-b030-c6db62633931","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1238perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1238perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e407f0-608a-5b22-8d75-7ca123e191eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123902-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123902-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44728ccf-660c-53c5-a473-bf0bc3e2b11e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1239291-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1239291-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce9243e-17d8-5fb6-8d25-ec38d738b469","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12398-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12398-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9219151-067f-51d4-af41-d95ec4b806bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 123testeos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123testeos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a64d80-54f1-5a4b-92d7-3fcad63d3978","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12402-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12402-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b30ccfa-065c-58ba-a0b8-61d7af82322f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1240marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1240marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24741e08-0bdf-540d-8a85-890ed49cfff9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1241255-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1241255-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe086bd-d1da-59bf-b3ee-67717aafe8b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1242betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1242betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f5faea-3d65-5ce0-b94a-f7db8dc4efd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 124322coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124322coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990dd6a2-961f-53a8-b64a-c57419c1c3cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1243281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1243281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d57589-5db4-5351-b046-f950d72bebe0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 124397coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124397coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569edb38-f6e1-57e9-8f67-acb5e6cbb5b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 124468-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124468-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc225e1-d70b-5e60-8c49-35b19b45ff7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1244betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1244betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fdbb40e-21ef-5ab4-b10a-eb95b2c0dda0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1244betpas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1244betpas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35c2e5e-b827-5092-963b-08c3e523588e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 124533-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124533-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5177d97e-f0fd-5491-84f6-506b880b2b36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1246marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1246marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0780614-c160-542b-a831-6fd397a51a93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1247milanobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1247milanobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9231cd3-3f3a-5b40-842c-a07eb8b25e5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 124921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005a8f03-4102-569b-966d-e6586d7f3de7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1250ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1250ultrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd53b30-44c6-51eb-8bf7-36640cfc496e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12512985192859123.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12512985192859123.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe41776e-af17-54e3-b931-8093e9cb5118","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 125163binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '125163binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e9c394-ba9c-574f-a198-4d57c0569217","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 125195coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '125195coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c415e34-3a5b-5377-9afc-fd59bdae2e7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1252marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1252marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5659012f-bc6b-5d6e-88f7-6baa1d0def71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1253marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1253marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbc3768-1099-5602-aff2-cebbb9efc3ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12546-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12546-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff5e139-a26e-5205-9220-6560c9cb9c5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 125618coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '125618coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6491bb0e-8db1-5cf5-8c08-e1099d3175a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1258perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1258perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2da6d41-edfa-505f-8138-9701869729db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1259betpas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1259betpas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d600139-38bc-5e2a-a82e-6a540bb81694","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1263721-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1263721-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36bc12ae-1959-5707-a5d9-7f2ea7b59170","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1263721-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1263721-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93482da-3e1f-5268-a362-59d9c0d986ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1263721-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1263721-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b92cc2c-2a73-5d7f-9d5f-096da803dd7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1264betpas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1264betpas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd324c50-8845-5648-b4e8-23320c6c9bd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1266perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1266perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7906e4-464b-5be5-ae84-b05f8d6e26f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12692-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12692-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf1ec3d-404c-5908-95e2-e7545f916778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1269marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1269marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8c84f63-d66d-5c86-8ceb-40c391bf3329","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 127253-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '127253-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f02bf6b-1b4d-5595-aa21-5bc897a12e4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 127329coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '127329coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--760044bb-d4c7-5307-b960-62599f36a3e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12758172523.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12758172523.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62325020-09db-5250-b0da-0a4935cecc54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12759icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12759icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc6caf0-407e-509d-94ce-556123260e91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1275betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1275betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--169c6850-6517-57d3-b3fd-a1573de97cda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 127653coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '127653coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bdeddb5-1140-5f52-9a4d-64bce8a50a89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 127910-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '127910-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae3dfd9-99d2-51a1-91ad-9e8e0e78b869","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128345coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128345coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1419c58-a53a-5b3d-8d3e-220ea6bffee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128354-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128354-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac7d0a4-3855-5d2e-853d-dd15fa7b0c3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1283vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1283vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c18ca42-7073-5e76-92e3-6f3f8ed74624","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128520-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128520-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32660bc-b297-5d1e-bfc1-f3f80cad7ed5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748e1656-2267-50e6-88bb-327575b78437","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128533coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128533coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7532cf34-67c6-500e-8c4d-65eec3a1d7d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1285marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1285marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f4a29d-3290-5729-a40c-c695ca935378","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1285sahabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1285sahabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f28bfd6b-cd7a-5ec8-9ab1-d808380f952a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12875-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12875-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f6e70b-c7e7-5518-9386-d265644a92f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128765-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128765-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b89bd5-dc55-5810-9a51-e3ba9accedb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128810-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128810-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b885e38f-5b20-5e73-9555-87a7e887b3c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 128822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218912c0-54e9-5f58-900c-a74257fc275e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12902-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12902-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a7755b-595e-5423-931f-1c8068897fdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fab0e0-e626-5340-9af9-acead1516593","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129322c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129322c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095ef69c-26d6-5238-87a7-bbf4bf0259ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129322coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129322coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652c1cd1-4bfb-5e83-87f6-75a7a89d1eb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1293493coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1293493coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b563305-7ec5-5e68-8a7b-db9f889b73ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129523coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129523coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7c3d24-b188-5409-a69a-8b6d4e68c4a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129525coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129525coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f895bb9e-6acd-5716-afa8-36110a970e4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129526coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129526coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d133641-7ec3-5539-94f2-36846215b2fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129527coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129527coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c136b8da-bff1-52f4-8de3-6aff0262772a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129528coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129528coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a040462-3cf2-5be1-81e1-7fdf45fe7a81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129529coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129529coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1129f809-8150-5bcc-8c13-9b2bd8479368","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129626coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129626coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373224bf-4762-541b-a5de-a3e0d9540bfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1296marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1296marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e85a05-7b3f-5e1c-a242-69873d441946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129756-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129756-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88594a42-54ce-5310-b516-61827d51d6ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129756-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129756-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--334552bd-8e85-51fe-a073-1a4b583b8dd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1298213-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1298213-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6150ddf-509d-59d4-ad01-195878ebfa47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4993b599-12d1-53e7-9492-486c49359e68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129932-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129932-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--242ecad6-4c16-50c7-90a9-1881de5ebb31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 129934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f8d5e5-e280-5b00-9104-1e5a078915ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e07a6df-ab2d-514a-9a4f-250cb94e03a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12xtrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12xtrades.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332cbf36-4e10-5fd7-b861-4bd43151642b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 12xwealth.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12xwealth.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fb0579-c087-5d94-944d-576d3fc92767","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b99b1ce-df99-5c8d-8000-e54c011cbcde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1301betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1301betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5b421a-361e-52cd-bb1d-59e96ab7986f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1307restbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1307restbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac101f9-dd3d-5888-901b-72d12eac4ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 131-chase-identity-verif.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '131-chase-identity-verif.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8cea90-ebb5-5d49-b17c-19e633c8fdfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 131048coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '131048coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c622989-9f31-5e11-8318-825530db4567","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13107-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13107-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b917aa-b9c3-5280-814f-28ac299dcc10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1313betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1313betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f8a329-fcad-5a78-879d-8432db51f5c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1316vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1316vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c11aa36-b91f-5c58-848a-238ef8275774","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132067-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132067-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fe8af60-23f6-502b-af08-9de1c529b921","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132193coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132193coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f8f1fa-ee01-540f-be1d-f52bd99656e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132493-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132493-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32b2879-a978-5ddd-93be-46dd400aa699","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132493-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132493-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c185707-512f-59d0-a3c1-2eb96be3248f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132535coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132535coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a52d0c30-a44f-58d6-8a41-6a4939565278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 132662coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132662coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21cbbdea-c508-527d-a0df-d02e9820986a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1326betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1326betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6ae777-a4ab-5a85-9059-8d8cdfb007b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1327sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1327sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cbd429-18e3-50ca-b489-9d88f60a228f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1328271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1328271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624a1b66-2a69-538b-8d10-80f3e479d388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1329betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1329betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80468d94-ebdd-540f-903d-77740596ddc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1336sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1336sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a191bf73-e4f2-5c11-8705-8113286191a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1336vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1336vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6416ac-d303-5cf0-be0b-9a4175da7bf2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 133781coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '133781coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55478065-46a6-524a-926d-a53d841d1f28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1337vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1337vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458e47bb-cfd2-5912-a7f7-3d58c1d1de85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 133830-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '133830-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--514a7452-0601-5842-b351-7d63acfbf6c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1338499google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1338499google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--954280ff-19f4-5d85-874b-c54b5dd6a759","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 133920-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '133920-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e939e200-8c2c-534e-b4cd-8b6bf8073097","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1339betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1339betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c5492d-06ff-5d8c-9d86-3a8d948f3335","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1340254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1340254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46ca09-b24d-5b6f-b1f3-8b7b87330c49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1340betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1340betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f81794-a7d8-5cab-b000-a714590d89af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13424coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13424coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f0df0f6-7b0e-5a1b-abb1-0781cb2343d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1344betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1344betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba008951-df67-5e4c-8e1b-39d94d3644bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1344vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1344vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9164fe5a-c7de-59c6-a4a1-136fbe1eff28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1345vdcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1345vdcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae257a6d-147e-5de7-b7a1-bce1dcc04e20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1346247-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1346247-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88526e90-d607-51c1-8460-f857760b7dcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13473coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13473coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cebaff3-2dca-5962-a3dc-8adaaddc0ffc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1347restbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1347restbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f57a7d7-d92b-50d0-b86d-1d21f7e1ee3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1349marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1349marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa17c45-ee57-5754-8a1f-53f5cddcb120","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1357141-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1357141-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049ef8f2-f3b4-5151-a54f-3fb2eb65f4fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb6263c-bab7-504f-a9f8-afa298b6a4b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13592037-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13592037-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1e6896-3ebf-5c95-9eaf-19fea983692f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 135951coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '135951coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e5547f-934a-5539-bdee-62522722fdb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13597-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13597-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a925260-c305-5a63-b040-3fbc82cc5b1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 136271-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '136271-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e9d2a0-5ebc-5d35-8e86-90b2f388d918","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1369marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1369marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b1e278-b0ff-595e-b168-8aa0b36eb277","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137192-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137192-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814a9bff-6b8e-56b6-8281-249f9ca5ec97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137192-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137192-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393cf1b2-bd5d-536d-908a-3804c6e5968b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0b220a-951b-5d51-9e18-5a2450cc8aad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfbc940-3217-5288-99b1-816da72209b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fad2adc2-804c-5c60-9e44-fbeceb27ed70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137265-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137265-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4164405-34d8-5231-a2ee-cf9657fd006d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137267-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137267-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46ea086-6dba-5224-a343-c6e7cee3de44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137450-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137450-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3acc8e44-69e7-5fd1-8a60-1a9d420cca9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 137662coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137662coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b37fc1d-e3e4-5354-84e0-3084a5912e36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13792446-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13792446-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709898b2-ecd9-502a-85fe-888055c6fc14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--778f361a-41ad-504d-bd30-6391bd8ccddc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138140coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138140coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fce6d35-9b52-51f1-865b-a3e979e98363","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1382restbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1382restbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c356489-3d14-5668-884a-2ded8b56b14b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1384012-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1384012-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--956bbaaf-13c1-515f-9501-87cffb86d1e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138491coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138491coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed46ac6-ea37-5b9b-9e06-002fdfdd0a60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138492coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138492coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5973fe-cdeb-5f59-8ba7-5c198f063ac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1388725-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1388725-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec84d5e0-2fbf-556a-9435-f743177d8e29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccb62273-8cdc-55e2-8332-70ce7d7d65fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13891-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13891-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ede0078-ec39-5d91-84b5-0e1c1fe2178c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138922coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138922coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ebc77f-b5d2-532e-8f86-cc4af8f95f95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138924-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138924-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6de03d8-a403-5c05-b696-d88b71a91707","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1389285coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1389285coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f7de0a-afab-5b50-9bc1-d39c527443e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 138942coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138942coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3758b260-1284-5211-b213-648b7e69c067","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 139283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '139283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c61aa71-738a-5f3c-a090-694cc186d745","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 139482coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '139482coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81801c1-841e-54df-b425-ffc126e3e8f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1394891-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1394891-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469f70b2-0155-5b87-93db-9711abd4c396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 139510coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '139510coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fdb8ff-b080-5fe8-b84b-5611e43195cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 139577coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '139577coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6562e4f5-ca64-56c7-93b5-839e5ee84473","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 13cf3de235d7405dbeee0187511a2048.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13cf3de235d7405dbeee0187511a2048.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef7accae-90cd-51f2-a429-b43cab80ccfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 140275coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140275coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa6763c-e79f-55cf-9d02-a33e4e9e99bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1403queenbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1403queenbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528ed051-0fd8-52db-8df7-4a11abc3b217","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1407bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1407bet10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--facf07fb-d94d-56df-9ee0-163dd061ff99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 140928-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140928-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36bb751d-5292-507a-b76c-183729643ead","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1412marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1412marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e9f3010-f0cf-5c5d-bad3-50ab0213fb1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 141924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1fc5f5-0714-58a0-a05e-61804949632c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 141946-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141946-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91f2707-2233-5c9e-957e-0c3877645281","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 141model.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141model.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93eadec6-67ea-5c80-b795-ac2470b77773","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142512-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142512-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb7644a-93c2-5ced-afbc-5fe07fb3ef53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142512-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142512-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143248bd-5b96-5af3-917c-bdccbc95d6a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142693-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142693-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc69781-6f22-5c52-bf60-d84aadcff56a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1426sahabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1426sahabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33aa0b7e-4c1d-521a-95eb-2e2b24b7b797","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142792-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142792-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8f5297-78e2-5f57-b438-cd96121bc222","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142793-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb09c12-f773-5d6a-9539-d0eed70ca40b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142794-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142794-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aeafa44-c2e6-5c8a-bb6f-c03d04b7014c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14281-barclays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14281-barclays.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b725b51e-6f68-5ecf-ac92-be4ee9529b92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1428181-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1428181-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d247bb7-7659-5422-837c-9319226c3281","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142952coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142952coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--123d79ca-ff61-5f4a-ab2f-f14114f73ece","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142953coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142953coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4634613f-ecf9-5ad6-a7d2-1d29cdb0b7a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142954coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142954coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd72f92b-b4b4-5fbe-993f-e50955d98ee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142955coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142955coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbe19d77-b4a5-5c89-8848-7544a3f3d041","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142956coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142956coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3badc1d8-49dc-5fda-ae0e-3703ccdad219","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 142957coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '142957coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab2449b-2c56-5ead-8564-47b763160ae5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1433restbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1433restbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--593d88e2-ac76-5e19-b598-1430f016e479","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1435betbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1435betbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482f13dc-f88a-5ddb-89f6-4cd2339514c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 143758coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '143758coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50bd2100-d10a-5872-a2f2-ac5d5cb65d21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 143774coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '143774coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1994df2c-8937-5858-bb3e-055c5d2dc42f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14378906-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14378906-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4249f2f1-016e-566c-bee9-ac9f1c67dc15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14378907-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14378907-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7753987e-8ce9-57a0-ae8e-b140aecf5852","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14378908-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14378908-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d017a7a7-ce8a-53f2-befe-807779f3a66f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 143817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '143817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb167ba5-9b4d-51d1-baeb-adf0a6542c8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 144325-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144325-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8acdd5e-f43a-55a0-a68f-162dc8ce20f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1443betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1443betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78758143-24c7-5214-932b-aaa118dfdc4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 144818coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144818coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b5c951-c4c4-57dd-9990-4950bf142d78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 144818trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144818trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9667c1-ca59-5dc1-a151-9220a1c97cec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 144827coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144827coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7b3208-c1fe-56b4-a8c3-e47c9bb92f2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1448591-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1448591-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--728cb71d-3330-5c23-ba9a-eaec04c9c0bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1448bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1448bet10.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bba5572-e703-59ce-b060-d4a5d709a0e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14557852-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14557852-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b42ea91-6d21-5f19-870d-6c6f42556e0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14557858-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14557858-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b07fe5db-89a8-5f7f-bb0c-bcb98b45ae19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14557859-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14557859-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8855c160-f6fe-5b42-b7e6-a1f5cd642a0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 145789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '145789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be846b5e-df36-5229-9990-0de0da8cb54a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1460perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1460perabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8643632b-ee90-59f9-a169-90df2d2bb980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14627-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14627-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82b42c2-d270-5761-b7bb-0a2a03e61b34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 146475-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '146475-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aaf4c05-f157-53f3-9de6-e4c29f32624e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 147253-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '147253-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f324013-b091-5acd-a6b4-e5f5c47b64dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14735-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14735-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edaedfc-8cc0-5b71-9e6f-aa68dd6b1083","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 147841-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '147841-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fb4aea-d7c7-5a75-bee5-84e2e2a5578b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 148259coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148259coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01561d10-0b81-5c7f-ae27-195ad96d9d72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 148275coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148275coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e647b952-bf86-580d-8f4f-bdfcf179f0c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 148293kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148293kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c60fc6-a50c-5235-b0e1-42d54d6a77c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 148330-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148330-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c740ce-16f7-5537-ba9a-342fa3eb45a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 14872322-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14872322-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99af1c1a-3e69-5419-9eef-beae653b0a48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1487344-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1487344-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5013be3-3ff1-5493-be06-d0efc73f66ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 148744d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148744d.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac61d4f8-34d8-50f5-b6f9-a7caf1fb11dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1489194-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1489194-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f0f7d14-0973-554f-851c-3c6c3510d09a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1491betsl0.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1491betsl0.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c61bef-eacf-5ee0-95ad-ddc306b916df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149253-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149253-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d628210-5460-5aaf-a79d-973213ab376b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149283-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149283-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4698d801-6537-5b28-9361-4a45fdcd515d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149283-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149283-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb49742-fb79-5647-b7ba-39e3d84f96a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1494betkanyon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1494betkanyon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3870697-c145-573d-912a-fdcae997c9ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149561coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149561coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf0956e-6d36-5272-93a7-7cbc3a31ea47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149577-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149577-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ac2c124-1f14-5847-9004-c35c0fdd400b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 149763-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149763-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--716bf517-880b-5ace-b71e-e3184bf9ee75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1502tempobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1502tempobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05437b64-faa0-5b5b-b492-fa71879fc450","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1510lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1510lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d688c2-51ee-5a30-9f1c-3aaf8a9a3e5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1524sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1524sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4d369c-fe43-5964-83f6-3502b99457b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1525betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1525betebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93125a38-edcf-5a7f-acaf-448c7d0cd3d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 152674-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152674-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--079aadf5-f629-5542-8bbb-5a3be2ecd489","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1527851718725.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1527851718725.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929aa9a2-b577-5da3-a759-9c8ad9b43b43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1528sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1528sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8d29b8-3ec9-53fc-813c-b12a877284de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 152907-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152907-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a223673-ed99-5eb7-b8ea-e2fcd1576c7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 152942coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152942coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df7b0b5-1ce9-5d78-b036-4cdea4b1db39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1529sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1529sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9b9b68-b842-5dba-b19b-f99323285a80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153541coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153541coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b68445-1107-5883-a7ff-2697a1767812","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153583-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153583-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0924d5b-33a1-5254-bd5b-fe228cda4fc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870cf1d2-cd8a-55ed-b511-54183cd52bb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153692coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153692coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c9b25f9-2a35-5bab-9c8d-4f4a7e0dd3f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153750coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153750coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1c6c39-63ae-5769-a054-4346b403bb04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153854coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153854coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f3aba1-d370-51cb-bcef-84b21a7844ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 153897-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153897-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd0bd87-2b2e-5451-9cf2-b19dfa7db083","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15407-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15407-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9f945db-bb9a-568d-851f-50caa65a05b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1540sekabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1540sekabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58f5f0a-b7e1-53e6-a795-40083f326151","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15423213-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15423213-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b750e7-286f-5fee-b1fc-594b78da737c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15423214-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15423214-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b71e571-e906-5b09-964f-56cd9536e426","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15423216-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15423216-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d33c17-7d38-5450-a1ab-ef669eb4b467","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15423217-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15423217-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd1d81d-7ecc-5aa5-a3ad-e79570f1e2fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 154236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '154236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a6441b-d4bc-51a9-9d7e-4f3c171c24a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 154672-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '154672-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b638de4-5672-5bc2-982d-a326efdb34a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 155224-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '155224-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a812e9-0b9f-5196-b9ee-4cc68fc40f6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 156283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0999cddc-a8d1-5954-a42e-1b9e7fda85a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15631-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15631-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447fba83-cd2a-5b38-be23-c8d3a5c1c91c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 156376coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156376coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7b41ff-d0d3-5260-a6a1-8c3bbafbf14c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 156478-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156478-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bebd386-4010-50f3-9efa-1b03080c820f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 156743coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156743coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404ff3c-3fbe-51da-9a06-e967184d7869","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 156953coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156953coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35646bea-5570-5fbc-97a3-5a0253a8b7d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1572393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1572393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50057e10-8ec5-5220-8023-b8d2f36da93d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 157253-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '157253-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--089363ca-4556-5a03-b180-df5736763793","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 157392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '157392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00418661-f111-5307-8cc4-e241d84df757","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 157728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '157728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec23d77e-88af-5fa1-a447-7c82ee437c96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15773-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15773-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45f252c-45af-57ff-985b-8ef087d37a6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1581932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1581932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c3f351-4b7a-5ef6-9ea2-1b9c2bacb154","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158253-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158253-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fcb9c6-85ba-5f8a-861a-83145c25b9eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158265-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158265-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e40e6b-6896-5a52-8096-db5a0cbc5778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158279-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158279-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47972b9-a0d1-5b15-a7db-7f9240a71ade","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1583041-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1583041-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ab807f-21ba-5ce3-a3f1-aca99f0c7e2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1583047-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1583047-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3193703e-3669-5a6b-8463-baffbef6d821","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1583048-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1583048-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--997cf277-ada9-5ab2-9017-5a3fc8208a77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1583049-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1583049-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd111ed-a01f-5920-839a-fe265eb0a4ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b75409-a5e1-5859-8916-cf773d494370","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1585329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1585329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e931c88-f54e-5af4-94e9-43abe9642912","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655adc11-33a8-5dcb-ab5e-b4677a563ee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158726trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158726trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f219ca8e-d3d9-50d1-9de2-411eace127de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158855-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158855-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff98637-4df1-5b81-b350-16304a605967","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158924-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158924-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab055d4f-470f-5ada-948a-c23443cef2cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 158940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158940-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--663a468c-e010-51c1-b12f-ab88c57947a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 15912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04842fb1-5c56-556a-b0dc-edbcc0ba2f8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 159153-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159153-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bca74bc-bf4a-5fcb-a53b-05a8ef4327e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 159184coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159184coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4e32ce-bb2a-5725-8a8b-31f6a25123ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 159185coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159185coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac36ec9-0378-5e82-8a80-b2d3d6b63fd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 159338coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159338coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739803fd-ce24-555d-9c2c-ec550e64196d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 159823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f849e060-1e3f-5e90-8b33-1e42407d0cf5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 160282coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '160282coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f211bd2c-4089-5dc0-9c37-df3dc873297b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1606imajbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1606imajbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabc7b5a-fd0f-5687-934d-1a208151815f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1619imajbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1619imajbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e551083-08d2-5c03-ac04-b07742565d0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 162532-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '162532-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afff526e-6750-541b-8694-12cbfb65f621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 162661coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '162661coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9c8ee2-b74f-590e-8303-154938d97119","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16281-barclays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16281-barclays.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4acd887-3d10-5989-8dd4-5c580ea65a5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 162883coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '162883coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e31923d-ef2f-54e2-a4a5-ec694b62c017","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163-buff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163-buff.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1a261a-99f9-507f-a380-e4fb70c7ebec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16307-paypal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16307-paypal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c972fb77-0793-58b3-b429-4136722ee1e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163102-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163102-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03cdcbe9-68a3-52b6-b800-9ff19efad84b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16311769-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16311769-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fa1a9fd-f52c-5bc8-bacc-c84134e90dbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163578-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163578-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfec6fd8-b708-5de8-9637-7c3fda30bc38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16359-paypal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16359-paypal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb358efe-0e29-5db8-96df-48dba0d1bf80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16373624-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16373624-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7fb8c7-cda2-5975-bac7-e160b3c617e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16373629-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16373629-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20479f4-bb6e-5d9f-b2c6-0d7e2a4c540a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1639582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1639582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15149869-93ec-54c2-8e27-93f0910530fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1639585-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1639585-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ce0ef0-146c-5b0e-97b0-2498cc0bc6ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163958coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163958coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d945bbc1-b84d-5786-9392-8335a7505fb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163qe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163qe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b323dabe-be46-554f-b0b9-d1bc050f0208","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 163qm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163qm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c33d61d-7c7a-5286-9578-f05ea1004935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16440-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16440-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba04144-f9ca-5023-bf8d-2d10e436ef78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 164527-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164527-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba0a2dc-5642-56df-ac9d-317f2ee64183","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1649200-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1649200-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--062dbc1b-c6ea-527f-82dc-18c860daa4ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 164928coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164928coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07dcc879-c052-5ba3-9ba6-74857544fda8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 164933coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164933coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fc19c38-f66d-5384-9dbe-5dff2d9c8bcc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1649574-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1649574-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddfc2df-a84c-53a4-80f9-42c426f06a0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 165365coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165365coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2998bc5d-b3ff-5f06-994f-706ee122beec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 165792-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165792-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb58692-35db-5489-bd18-eb801e592bc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 166375coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '166375coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f983e340-91b7-567b-8302-bc2d516b659d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1664lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1664lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0b3f21-f1a9-53af-bf3c-ca74b7b28ff7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1667casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1667casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caff387a-4de8-5f75-87c0-318205eb4ccc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1672293-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1672293-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0011ea0-9649-5019-8873-2ca6231dcc4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167253-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167253-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1acf0d0-9fd3-5968-9309-679dba0bc615","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167324-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167324-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d568bc27-f101-5bd5-9684-7944e816744b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd2119d-f29b-5940-927f-8ac027949556","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1673823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1673823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d6eda7-ba59-550a-a6ac-0d8fbb45e015","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1673971-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1673971-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2aca5b-b37b-5b64-bc6c-4e4698348a6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167526-firstcitizens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167526-firstcitizens.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a7bd72-9fb6-578d-abe2-74aab4909df6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 16772-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16772-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9314fb66-656b-5fe2-a5e5-475c15538c3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167743-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167743-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73815501-31a9-5ed2-bde9-1b179ea00272","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 167943-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167943-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b1f31e-08a7-5fcf-9480-3ad9a773d869","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1682566-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1682566-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f657476-5d93-5154-8fde-124a05b5388e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1682567-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1682567-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93dc9fd6-0d59-53b3-affe-a77f89ea7ccf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1682568-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1682568-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea8eecc-9b83-5a3d-ab20-822cebf316a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1682569-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1682569-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b44fb2-1219-584d-ac21-2ecd1a6a6acf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1684marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1684marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34bb3cf2-45b3-51ee-86f0-21f07bd6cb0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1685938-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1685938-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6045058-07ef-5dea-aa57-a46651c29e20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 168techy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '168techy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970f4417-393e-5d56-9aee-7b26907e3fb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 169385-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '169385-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16fa361-74a1-5957-b114-6fa6a771bba3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 169496coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '169496coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4566ca-6c46-512a-82fb-077545ef91fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 169825coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '169825coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b46a30-1647-5d79-834b-ab9ab5c8d69d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1699marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1699marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8cce41-e854-5008-a147-99d91a6ecb55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd80a6e-92aa-51e9-8556-3fa9bc58e57a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 170-chase-access-auth.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '170-chase-access-auth.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7ea0f7-3f31-5290-8a16-f4fd02d710cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1701133-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701133-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60436dd7-d9f4-5acb-89fe-4c8c9e51ec08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1701521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92912f53-f04b-59c1-8102-cbccd18e6d23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1701593coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701593coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65456266-d15a-5ffd-a873-48881dc3828e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1701877coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701877coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27cb1523-4aa1-5272-b22d-318d40063093","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1701977coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1701977coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d395fd-126b-5a3e-8bca-d998b01ad2b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17024-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17024-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355790f3-cd21-574f-a1b5-5acbb2660c8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 170392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '170392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb03225e-664c-5a93-bac0-2c586ac777c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 170469-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '170469-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e031825b-127a-53b2-a538-7ff5d84e0a73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1712851-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1712851-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba0d71f1-d6f9-5813-8e3a-811dfece9541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1713572-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1713572-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7668ddb-347b-5e29-a29a-fc2d2f0d7f4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 171461-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171461-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4b81a6-c2d9-500b-957f-470f25d82921","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17148coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17148coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea02ef2a-f64a-5530-bb9b-5a6221df2a8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1717111-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1717111-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0265268-4eaf-5c49-8715-8e60949fa3d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1717112-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1717112-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6708ea45-3ec4-54ef-8aec-d75d35e3c3ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1717112-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1717112-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d214067e-25b4-5b7b-b00f-8e37c6ba8b59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 171733-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171733-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978f459b-4a7d-5656-ae95-a009a512cdf0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 171824-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171824-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--271e0af7-c2ba-5cbe-990e-dab0cf65c3b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721271-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721271-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32284aef-eaf1-533f-afdd-e0fb223a499e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--350664fe-0dcf-5887-a261-5686a010de65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721271-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721271-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4718e4e-5846-5cfe-966f-bf5d07676a1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721891-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721891-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d24e12d-c17e-5681-9ea5-636d117a6674","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721891-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721891-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae293008-a25f-5c84-b5d5-1d7098e31b97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1721891-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1721891-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e78747-39d8-5b0a-b7fe-ca071f7938ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1722371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1722371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1d3504-8d39-591d-a255-b1a6f33f9401","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172383-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172383-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41a14fa-af00-5c34-a5ff-808ba57c2380","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172446coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172446coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--734b675e-14ce-50c4-b318-4694e799d898","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172628-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172628-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb81af9-2d80-58b6-aa17-7f1ab276b9e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1727271-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1727271-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf0e65a-27c5-512c-aca2-d97546eaced1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172814-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172814-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d25cdc-2a1d-595f-af20-6fa6ac69ae68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e416e56-ebc1-5b9e-9f0b-67cad83be032","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1728221-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1728221-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e065e1-716e-57ac-bf9e-30e807512bb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1728271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1728271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--137ba75f-3cd7-5918-920a-00fa12cd40eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172840-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172840-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72438c21-7b01-52dd-bc20-69b1bd4a890c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172851-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172851-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be8c86a6-9ee2-5e28-b07c-ea62ffa3f09f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 172937-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172937-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--523d4cdf-2b39-5557-b7af-e597db0b6127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1730252-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1730252-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f322ec7a-c053-5c80-94e2-25919abd4599","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ffbe62b-c2b7-5b1a-a7bd-742148543df7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173462coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173462coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b29d12d-4467-5b77-8cc7-bbef31d022ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3091e2e2-8715-531f-a84c-e05cf139e0a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173822kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173822kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5927320e-2c60-5a6a-a856-8fa7ba75be27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1738kulisbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1738kulisbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a965f9d-3586-564e-8ff0-27fae1a98cbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173912-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173912-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e741cb32-fad1-5eb5-ae1c-b95f97a9bfd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1739218-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1739218-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7487d907-f28e-59ba-9e46-e30b342ecf52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 173946.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173946.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b887806-d789-5357-bd99-c8cfbeefac76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1739581-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1739581-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df8f4de0-8052-5c70-986c-313f68c67126","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1739582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1739582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f0aa266-b09d-59d5-8b93-6f60109af686","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17418e8713c9e6444e34a8cf5a361673.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17418e8713c9e6444e34a8cf5a361673.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4396a152-2938-5a11-8903-8b14c48b74c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1742191-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1742191-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7547d31-450a-5280-98ee-d9be6e4c7c48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 174506-regions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '174506-regions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad63f865-fd9c-5d17-998a-4010dc51e6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 174559coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '174559coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7edecf7d-828f-576f-8d84-6541f8a0c4aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 174690-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '174690-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e41af8-b1ba-5b17-93f1-4255ef8e7bc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1746925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1746925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6b73a6-81f0-5138-9304-cd8b0efa4b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17489309-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17489309-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67abc65d-36ea-500e-9a71-8b8562f44924","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 174920trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '174920trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8524361-768b-555d-8bb5-6d5686064398","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 174953-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '174953-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1798a376-e0e7-5e77-b878-ed073aaf8722","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1749585-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1749585-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c756712b-bfed-5049-afda-17bc1af1b7ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 175356coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175356coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91474b4f-327b-543c-bc3e-43c3ab55e0ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 175623coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175623coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a84ef76-5026-564c-95c1-b64f01b03a23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 175643-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175643-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a185894-8374-5034-a6d1-7b7b2f272c1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1757betpas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1757betpas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e975efd1-7693-5210-8146-334f462a45c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ded5e6f4-c049-5344-b442-625c609b496e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17584935-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17584935-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff674cd8-3207-5116-a753-f924db4d8a64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 175913coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175913coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4619467-0c6c-51d3-a806-6526884e1f77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1759283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1759283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d43c1e-e15c-513a-8cbe-b4dc29bae5c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1764453-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1764453-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1a893b-34ee-5588-8592-35db03630673","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 176519-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '176519-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68de8e15-7663-59fa-88aa-ca291ade9742","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17673490-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17673490-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2799ef81-6715-56ee-8002-57abe996fc06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177182-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c3ca34-a33d-513a-a609-7d3a60f1251b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177250-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177250-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd5fc60-953a-5c2b-a61b-faee648dc177","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--423ea8fb-4098-5782-aa38-1b7f17608142","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177253-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177253-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8696beb9-3d71-569d-8298-e56dec05643d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177253-coinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177253-coinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a2c753-b3eb-51eb-a6ed-2a03cf092ff7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177253-vault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177253-vault-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7d8376-c92a-55a6-bbb1-e7a75c7bd9e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177261-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177261-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25981a37-7484-512d-853e-525c9cac121e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1772771-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1772771-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c87c80c-13fc-509e-ac3e-73b1f22fa2f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da64e3ed-c9d7-5a24-9ac9-523b83734d4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1773betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1773betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dacb764-2917-5a9d-88e2-5dfd0c43a224","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177425-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177425-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70184a9-248d-5ac3-890e-d23db6a7bd97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177426-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177426-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289c96a9-56f3-5190-a604-a55cdceb183d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177490-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177490-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bfd3118-3411-592a-afb1-bd86292de18e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fd6b71-a312-5b10-9641-102581637982","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e64332-a05f-5f47-a0dc-6c1acc5a7f0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177494coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177494coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eead2e65-9800-5711-914d-a4bb14c9f82b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177561-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177561-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9458cb8-445b-5839-aeab-711d83e60909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177637-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177637-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa6aa0a0-071e-5efe-86f9-9c03a86b10a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177954-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177954-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e45fc0-b9b4-5a5d-85c5-f839d9c98467","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 177961-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177961-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5be291f-2b73-5360-8a47-ae8ec8ab63ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1780891-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1780891-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14808a20-8846-562e-a976-e7e9531e48cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1781291-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1781291-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791c24d6-cd66-5bfd-89ba-1b5d1bdd909c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782291-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782291-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eeb8837-dcfd-5cc6-b31c-fd98b08b7f75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782291-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782291-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80339e16-a774-53cc-933c-07866b2c4488","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91ec8b4-1930-518c-b997-3f97459b169d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178252-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178252-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8717ea0-49d1-5e17-ba6a-4a32af4075d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178268-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178268-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5604da4d-2954-5f32-a71c-d1c5e0247cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782723-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782723-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd06012-82c0-5b06-8364-3440e6954014","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782821-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782821-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d45ea4-e60d-5f79-9a1e-c6124a33a2b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782831-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782831-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b0d674-f7f8-502b-9d06-db2eb8eae48c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782831-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782831-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c03687b-9f61-5812-a16b-236e27f39c3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782831-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782831-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8797703-5d22-558c-9e29-e9b500eff116","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1782891-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1782891-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b7f491-882c-5871-832d-9dd451c6b46a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178292-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178292-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba0efc0-a96e-504f-8841-d3cf04461621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6ac2eb-4c00-5dce-a737-0439d7f7d9ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1784925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1784925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8cbab3-c72e-5e2c-aa27-48a98b637574","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178567-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178567-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e33962ef-fcfd-5796-9234-fecfd24bdce7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178609-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178609-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c151fba6-c2f4-5802-88ee-e7d29196a9c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1786942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1786942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47badb15-6570-57c8-87c6-bb9a75fab213","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1787betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1787betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b2d9f0-dd0f-51ab-acfe-8542f27bda59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1788betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1788betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85a0d1a-4b15-5f34-a9b0-04ba0f90d191","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178924-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178924-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d61359-d0ae-580d-89ed-a9577ed67c9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5889af6f-779f-5d31-b7d4-90f4bc9c7ffb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1789452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1789452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ffa678a-2266-580f-8aa9-762f8fd9edc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 178955coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178955coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859749a3-20db-5818-9391-e3d8403a5cce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179325-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179325-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de26da55-90c7-59a6-9b3e-e32b687d16d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179525-oneviewtruist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179525-oneviewtruist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea642db-59a4-5b07-8385-e8c57b5a652e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-bankwithunited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-bankwithunited.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a802001c-a86e-5147-9ab8-3a7b3c14b81f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-busey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-busey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57881b7-eca8-58a3-8d2b-dd0742bb6866","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-citizensbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-citizensbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e19ce66-57d3-509b-8dee-0811a69758f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-oneviewtruist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-oneviewtruist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc54d14f-ec06-57d8-8dab-7bee52d25cfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-regions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-regions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30ffb83-775a-502d-a9dc-32719af55ca2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179526-usbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179526-usbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b7b929-46f1-5a74-aa2a-4e7a59b1f028","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179582-online-cashpro-bankofamerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179582-online-cashpro-bankofamerica.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1561e4-1dc4-56f7-b8c3-965d7c83b3fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 179652coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '179652coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd728a92-13aa-5cb3-85ad-31073a3eb0b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2898aa-9c61-5081-9421-3d4547f2e287","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17lok1-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17lok1-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26cddad-0ce1-5921-bc08-fcb70a4cf5ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 17pharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17pharmacy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3b6e66c-72fd-54b3-84a0-b77710e4782a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85947b66-e605-5e1b-8388-64a583a3e1cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 180293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '180293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c0ffef1-1a1f-5487-99d2-6f91688627ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 180486-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '180486-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b64ecd9e-eba4-56cb-a954-fde87cae89de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 181143-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '181143-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b242fd-24fc-5a90-98aa-962e6072c197","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1812betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1812betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--989425f5-3f07-5e95-8863-1ea7071136a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1814betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1814betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b179de18-e851-5d71-b263-374487a89268","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 181679coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '181679coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a932e81-8071-5bc8-a71a-7b8962015390","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1816betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1816betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c4779-3127-52fb-a11f-dc5d7c666559","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182079coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182079coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d4022ec-9f1b-5188-9be2-7890be34783b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1820marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1820marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd4f71e-cf4b-50de-978b-204808040ad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18218924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18218924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f63cce3-16c6-5d45-aed9-0100c7c1729a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1821marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1821marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c45910c-40d4-5756-b8a8-0fd4b7c6836d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1822update.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1822update.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41d43a7-64a6-5a3b-9d29-71472d24ad05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18236-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18236-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b82e077-88e5-5938-a693-3149bf3dd150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182371-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182371-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bdbf05-698c-5199-a63c-4854019810ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182371-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182371-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cab34be-7b4f-541d-b12d-b4a67ca5b791","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1823759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1823759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ae85a9-421c-5723-a7b1-28af4ca0579c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182391-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182391-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632862d2-0441-51e3-a6a3-823fe86c85c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff491b9e-0327-50cb-b652-a4ea7b2da081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182716-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182716-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41778190-e141-578b-889b-c37f9deb2661","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827235-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827235-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b652ab-da1a-5623-ae09-6ce3c725642e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182731-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182731-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a775fac4-4353-59f7-ae7c-0cc34b128402","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827322-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827322-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af4cb616-6c20-5b20-b9ec-c0758c823834","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827342-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827342-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbaca31-3eca-5b44-8263-25b2ae4c7b3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12697b1f-de15-5e18-b4a0-ddf38e5b06e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827343-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827343-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31cb9d69-7691-52aa-a574-76dceeddf0f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1827343-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1827343-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d855628-aa04-5b25-9b8d-52f8b8669f5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182739-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182739-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6619532-fced-5e94-9f60-346c3ffae9a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208eab47-d6e9-5189-a9c0-41240d7e88f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182812-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182812-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72bba4b6-5d7c-51ca-b504-b40d45781394","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182812-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182812-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562f4d30-1210-550a-bc18-3673fcf7ac06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182817-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182817-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b98f2036-3490-5abe-b5ec-49187b581367","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182871-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182871-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf972548-9ba3-5a43-a57b-e3cc5f54458d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18288-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18288-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cabbb6b-e8f0-5069-9be1-a7af1f3864d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182918-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182918-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b3123e-931a-5007-b704-006d319519f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1829281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1829281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9388f79c-ce6a-54af-bf40-fd1c6efabb53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182931-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182931-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925eaa78-1290-5ca1-ba1c-6079b2db9276","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182931coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182931coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54951929-27dd-513f-9294-3c07d863827b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 182934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03cb2d5d-cc21-50f1-9894-db55422c994a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183051-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183051-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f76cd3-7ebf-5c4b-b931-ea77bfc42316","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183119coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183119coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc2225c-1880-57af-aad7-6fb841576c86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18312558-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18312558-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b720ed64-a7c7-5779-9e78-9ec020a2739f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1831betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1831betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa81526-556a-5231-aab1-dd75f0f523e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183456coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183456coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda12faa-f4b9-54e1-901d-6c36a3097ca8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8245a31b-5be2-5e38-8812-9372068f0c59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1835246-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1835246-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f726090c-063a-5904-b9c6-3a95dfb33185","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18373-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18373-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--723a8f8f-194b-5ea4-b978-cbb47d25b196","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18374-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18374-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376b76d1-766b-57cd-9210-1f7699cd3c8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--950e585c-e812-5980-9137-5e00c57b0946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183842-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183842-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f35debc-86f6-5148-ac66-277a855e8b94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 183937-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '183937-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f98a29-c563-5dbd-9512-4e7aa910f20d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18397coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18397coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--519ba2c5-6bca-5df2-b604-2bd4a25c5b66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1844betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1844betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f49f85-12cc-502d-a94a-b49efe9c2447","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184529coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184529coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdc8bb1-9c28-53b0-9d6a-fc679d4781f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18456789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18456789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca83607e-2090-5b7c-807a-4a7cc07165ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184613coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184613coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf15ed8-8182-5bdd-a49a-282e366008bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184625-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184625-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2964ef5-9d30-5aa9-b996-08812b4f4658","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1847039-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1847039-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--532e3105-26b5-5c13-a58c-0b393a2b28cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184705coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184705coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09853725-aade-5b28-b832-15ad4735c7bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1847322-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1847322-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50877ae-77b2-55a1-956d-2c0e3ca3943e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184772coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184772coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fc87b-9f86-5108-a9f0-7c58b5dfc521","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18493821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18493821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a179a595-4a61-5037-a3b4-1ffc1e239cbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 184994coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '184994coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5dab613-a5c9-514f-ba2e-4e42f183f928","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185126-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185126-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345ace20-3b16-56cb-b407-b9fd938bffe5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1853betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1853betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f62168-750b-5bb9-b75d-e8da7b24ee48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1854betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1854betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c806f7-de77-5ff8-b97b-fbe3aa9c88b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185642coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185642coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54a984ee-cb89-5bbc-a13d-829f6a0be417","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185679-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185679-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b081cda7-1020-57d4-9da1-433da2924ede","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185679-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185679-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19e293a-1235-5543-9bb3-02f7fcef23af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185679-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185679-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bc423f-5f68-5e26-aed6-dae28a5f966d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1856betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1856betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cc3755e-1a1f-5367-92ad-4f169a0ae3f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1856marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1856marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cdfa03d-9e29-50f1-b972-2f7bdf2b6ce0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185721-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185721-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80f6f1b-15eb-5fd4-a1f6-c3242d4fb709","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185722-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185722-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f765e503-fcd1-52a0-8df1-59e540f59e66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6302a3d7-14e9-520a-95b2-5d464cdb2a07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a0af9f-0b2d-5564-92fa-277172518541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185725-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185725-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--325bd467-0a46-5f5f-8667-3e7844522ac4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5c471a-0296-593e-ac45-4f09b76b38aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185734t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185734t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b278ddb2-f3d6-51f0-8a02-5575e7d56efb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185743coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185743coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0adea947-abd8-5249-b523-47e4b7857d75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185764-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185764-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad0ad6a-0fe7-5d78-974d-10789c837de0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d0e84f8-9648-57bb-a31c-7d78b9340612","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 185949-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185949-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--834a889e-6606-5f21-9819-7168d380cf2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1863betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1863betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a9332d-e553-50bb-8101-600d0db46e8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1867betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1867betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027da354-ec29-5e34-9964-a76639a516d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1871betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1871betnano.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde2cf08-2131-567f-8229-2a6d62636500","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1871marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1871marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73e25f6-c37e-5492-ae9b-10d59121ea75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187212-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187212-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e88a501c-e053-5799-b1ec-865106e98aa0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187233-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187233-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4fa1702-ac0e-57ca-b4f3-a9ee11d8218e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1872361-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1872361-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89e6b9ee-7087-5f56-b2b6-9f0b879ba90e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b4ec8ee-9825-5066-9eb8-34ae758d8a3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187351-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187351-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a631881-16d6-5fb3-b9d9-ea882c940c72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1874290-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1874290-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a3dd8b-9d29-5b0f-9c47-3e021694b26c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c2ad8d-60ae-5f98-9878-8cba34d5a1b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187456-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187456-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bdaf346-a1e3-5c44-b61a-85a4e1d769cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187456-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187456-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ddf9fa-f8a6-5e7a-8dab-62d8f68e4230","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187456-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187456-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--213b9819-52f5-5376-8a73-edcdc5d38359","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187468-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187468-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da648416-f625-5d69-9ab6-121649e2aa15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8e89b0-622e-5471-ab57-80529c8e05e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1875612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1875612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c14fa57-2028-595b-8465-70e8a7288cb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187628coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187628coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365fc77f-5918-5ede-8231-bec5714f013d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18765-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18765-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea4ed61-973c-5d67-9bc6-29d303ae7888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 187928coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187928coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0255134-86ef-5b9e-97ac-c1032093cd5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1879328-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1879328-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824f25bf-9923-57ec-8266-5ee063294388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188162coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188162coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224e3ff0-5933-5c8e-9fac-43a5c3a06e79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188240-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188240-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4359d27a-1dff-5d64-a12b-f4267dae5eb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188358coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188358coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6491529-33a5-537e-94c3-74eb370a6f2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188370-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188370-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61f0fe3-8820-5bde-b0e3-2e52de32d3be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188betkorea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188betkorea.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951d788d-93eb-5485-9f8a-c006d95ac736","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 188betplayid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188betplayid.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c1e7fa-dcd8-5b4e-883a-dbdf1d699e31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986e4600-e045-58e6-a961-3882de5861e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 189344-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189344-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9326939-4ab2-549f-9b8a-d0032b2796e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 189384-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189384-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196ccbfd-d030-5487-898d-bc755a9b4a58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 189482-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189482-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dddd7212-e7b7-5a76-83ce-0e2b6068ef70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1897temobet.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1897temobet.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb8f197-bbc9-553e-bac2-a8f9868a2412","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18cd75973f1c70e8aa7a255a03951a46.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18cd75973f1c70e8aa7a255a03951a46.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ace063-3ffd-5cd3-be4d-79367a1cc0a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 18jiliphilippines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18jiliphilippines.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--353d265e-4ce4-5c90-9053-a5905d7082ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--045c4175-b114-5deb-9ab1-f402fc7ff8e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190243coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190243coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776ab2a7-0ca0-5e82-aeb8-577d82dba934","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19029130-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19029130-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedc4880-16cd-5e3e-b9dd-d1717f3e9f59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd627659-060f-57a7-9406-cfbf0d88c2ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499686fc-aa11-591d-a3b9-34cdf191a44a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19051-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19051-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3367a77e-b081-507e-bc90-4074cd651155","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190545-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190545-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40178f-80cb-5044-a248-2b7893730d7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190612ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190612ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d79e2a0-7643-598e-aa1d-ca06eaa41159","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190612trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190612trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05a32db7-fe6a-540c-a0bd-54d49a12c0cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190827-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190827-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d2968b3-2d32-5058-bad3-ae80bd4b8e8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19083661-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19083661-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f645ac5-aed8-5bb3-87f4-9b588ff712f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190836661-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190836661-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70064089-d291-524b-b7c3-5a0e592cd33b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 190884coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190884coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ae6399-51ec-5d56-a89f-e5d4d1d17d80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19093042555-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19093042555-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9714db09-88e3-5bac-9ebc-665f2df78cd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19097851-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19097851-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2da2e4c7-831c-5b65-b501-a01c17d68001","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 191000-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191000-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--997eb73c-ac4f-5642-adbd-1bf883ea3e94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1910381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1910381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea08e3d6-6cd9-5209-8665-c6c0d6d9eaf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1917marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1917marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a05b8c8-58b8-567d-93d8-bfc7f8ccc2b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1917tempobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1917tempobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6575e08-7d00-57e0-a98b-5029b511f435","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 191944-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '191944-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bdddd46-d275-5a2d-b8ca-4471738668f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1922172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1922172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e29daa-05c9-5eaf-87ec-360430481c11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf37476-ce0a-5a14-822a-df58324d6f8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1923209-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1923209-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e84acbd4-4100-57e0-acf8-0d61d028cd12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a98355c4-0ad7-5123-bdfd-894ac56df692","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1923783-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1923783-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c042e89-7069-5f45-a36b-84e0dc7fc051","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19243coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19243coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78550968-7c19-5b6a-b322-e0c22535f07f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f125c3c8-2f5c-5b9c-9065-5fed32a63f4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192474-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192474-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c733c8-e8f0-5cc8-a932-10e10930a2f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192501-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192501-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b1dbf9-f0bc-5b87-a8e9-15cb59b9cfc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19263847-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19263847-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c8a754-b15c-5cab-833f-38af59a73924","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1927215.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1927215.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1187ffd8-c5da-51cd-becc-1f6fa6299ff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192731-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192731-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0d45f-50a5-5feb-b3a1-6e6f5e204903","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19280174-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19280174-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f8bf95-5a83-572d-8feb-7f1eb37a2a68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1928271-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1928271-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55ab0d6-500e-537f-ae5b-e121b7e683e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1928372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1928372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb72b97-6d9e-5451-a9aa-9561b55f4c65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19284734-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19284734-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0486357-0829-5886-ab1c-df66363cfb11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19284coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19284coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f458eb2-ecdf-511c-a02a-493d32b8176e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19287coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19287coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b829e4-a2fa-58a3-8de4-0d9b4f3df0f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 192931-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192931-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0417694d-073c-5b1d-9247-46a306bc31e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1929311-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1929311-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb70433e-04f3-54bf-8733-de2efc9078d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1929313-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1929313-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd31478b-bf64-5e0c-a31c-3c8adab32a33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1929391-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1929391-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af78c260-9ae9-5acb-89ed-360074d7cfc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1929823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1929823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54da3644-1021-5614-86d3-22bfe78bcc0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1930192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1930192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049878e5-2491-52cc-9329-cfcd60e0b17f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193029-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193029-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd908401-92d6-53b4-99f8-b3fbb8488462","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19303764-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19303764-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf696470-d235-5013-80d9-3bd6e1c4707c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19305817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19305817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58bafe75-9ca3-5193-95d9-eb0d38937160","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193072coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193072coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb8118a-62c4-5f94-820d-16827e6387ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19312asdasd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19312asdasd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db0836f-c1b3-523c-a37a-29adb47f9180","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193141-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193141-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931eb65c-a7d8-5105-a861-d82f66a47a90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193284-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193284-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ed87d49-daa4-5f25-8221-d981db2d2af0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193285-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193285-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8d16e9-bfad-59c5-8d9f-470c4afb2257","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19331-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19331-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99abe309-f266-5336-810a-a83fc56cc8ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193471-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193471-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e9c905-aa77-5755-ba95-388b13df778d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193490-oneviewtruist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193490-oneviewtruist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2c81ad-63bc-552b-8943-b704eb144e5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1935381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1935381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471e2f34-8158-5093-bdfa-8ad7916429c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1935672-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1935672-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbeca913-950d-5d70-b8fa-859b5cfa046c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193597-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193597-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffaf475-60bc-5adb-9e4f-8a3e2d1a79ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1936817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1936817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64106c7-fbbc-5588-bb33-66870f5c17f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1936893-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1936893-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a356bee-1283-55a9-b802-d64b780853e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1937382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1937382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc40420-30fc-57ff-b6f9-1bbdd11eed38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193751-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193751-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5146d31e-8397-588c-9a6f-98348e15bf1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11e748f-0136-5816-a2bc-b9c1bb4c366e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1938102-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938102-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d3b9e3-b5a9-5b99-9249-db5641db515d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89590a64-5a1b-5b57-9a2c-7ed4d9372072","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1938172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce99614-a9c7-5456-9fc5-5bbb9e8351af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1938252-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938252-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4bddc1f-0a0f-534d-8345-7de1f1366ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1938271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1938271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89a91c1-4884-52e6-a47f-f88ddc056810","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19382757-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19382757-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58fb0ea-6914-56c8-a280-0378031a56c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19382758-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19382758-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca39579-dc54-5d6a-ae80-6cbe38ed409e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19382766-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19382766-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70126fc1-d4dd-5d7c-a9be-8a5a87d69a5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19383426-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19383426-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34c51cd-61b8-5a63-b82c-a5e10e5cdeb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90bfc5f-ca68-52f0-b57c-599de0767c85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c27df1c-0360-5ad1-a9a3-60a6ced94cd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193938-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193938-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df941003-2be2-58f4-ba5a-2daab8b28727","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 193938-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193938-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d1829c-42a6-5196-910b-449960705696","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1940114-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1940114-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3ca061-9aa4-5dfa-ace2-96b396dd4790","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194021-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194021-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edbcc034-3312-59f8-89bb-b625b2efa983","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1940254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1940254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c7ecf6-fa0a-541a-863d-c5a7c8954318","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1940283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1940283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc40a61-4315-5c83-a9a6-e22645ded1b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1940284-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1940284-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--750b0b75-88c8-52e9-ba08-0065494ef3da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19403875-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19403875-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d04bb4-92f2-50ff-9c1c-2f15028565bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194175-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194175-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63ff894-aab5-52b7-8198-b9a2128f2385","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194185-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194185-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c362cc-8fef-5764-a797-d7b932e729b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1941marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1941marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889e75e5-9ab6-5935-9e3d-f52b623937c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194294-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194294-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9331f0-f9d5-5626-8323-4630c886c239","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1943281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1943281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0506031b-d02c-530f-839b-c2c9a5eb61dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1943282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1943282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0dea8b9-7235-5dcf-85fa-c01ab5545c62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ac17db-b3ab-59e6-b6e3-05845491f92d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1943857-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1943857-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a22857d7-4327-5198-97e0-9171a3dc108e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194391-oneviewtruist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194391-oneviewtruist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f1d2af3-a643-5149-b92d-56d5b2bf8048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194394-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194394-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76da8374-9689-5c63-897c-89363196e9f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19443728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19443728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5805664-0327-5cc1-986c-b58bb45b2357","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194483coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194483coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8786a633-2ba5-5d63-a256-1cc81d8818b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194532-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194532-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c5d845-9b66-5649-bb78-16a1d9ceaee2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1945816-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1945816-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4aa3942-e26d-5b1e-97c1-b92a6b64696a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194638-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194638-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd24b8c-2e66-5137-b1c9-56d0956b52a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1946531-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1946531-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9809d16-7442-5e89-bef0-5c63ab6b6d3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1947246-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1947246-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672d9e39-8fbf-52d5-ae6e-ef3e63ce41b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194725-capitalone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194725-capitalone.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4518beb-f43f-5424-95ae-38d3b8413e3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7874c0-06a4-560a-ae8b-dd3627286fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19473482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19473482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6a6d8f-cc75-5f76-b741-df11c4886fab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194738-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194738-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd5d4a7-db9e-5af0-8d0c-2280b89e3355","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194752-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194752-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acafe94d-cfca-5d6d-ae4d-51355c25a7a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194762-firstcitizens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194762-firstcitizens.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20751005-0d26-542f-a68d-14875250b270","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f447c052-22ea-51c4-bb8f-d8c029a90145","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 194912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbafc529-b6fc-5f85-95f2-0d4d591383e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1949129-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1949129-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cc9dfc-410d-5fe7-97ae-78a363591f8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1949209-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1949209-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--379cf199-b3b9-55a5-ac4d-94dada072888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195022-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195022-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76daa3aa-9334-5d4d-9330-25add84d886b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195023-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195023-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c22772-9098-57e4-8d60-792245fdc6bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195024-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195024-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a072c5-b462-5e72-a630-bad57ab899f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1950254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1950254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee19f3f8-913b-5436-8af1-3e20ccc20e65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1950marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1950marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--655818b9-c425-5af5-9829-738d8c2b5cf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195148coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195148coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625aa102-578d-55f8-a775-82f2e0ca2c0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19528-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19528-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dcc99a6-5ea8-5e43-8fb0-33f6f42f7d2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19531882-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19531882-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5604fbb-7809-56bc-841f-6508622a09a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1953525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1953525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6378a7e-dc27-5afe-bd33-a8132978a9a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19535coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19535coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cbc894f-cadd-59b1-8404-7656f8e298c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1953marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1953marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--296bc9ad-ceb4-59c2-b087-efd0adfdccd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195712-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195712-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b865d881-5d24-5fe4-a0ce-8b570716508d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19573-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19573-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3afcbd79-37e4-5e35-918b-ace729498fb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195734-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195734-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a839e4-9d7c-5fc4-a852-8eff4c537690","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195768432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195768432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00ab3a4-7c70-54d2-997e-f264e3513ae2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad790be4-f026-5dac-ae68-dec41fd0f5fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8e33ca-bad3-5077-ba41-97f32e1cdf23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--193cd76a-a155-5f01-bafa-5fb2f94bab5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084a9b9e-9087-575f-bc94-b361b3631b83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e11830c-33ca-55f3-ac91-c9de0958be8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893602cd-95d9-593b-83a2-170a97f68b19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195772robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195772robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5826808-e49a-5c1c-8c61-7acd5022d604","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19578431-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19578431-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d56b56b-f6b6-5555-8d8a-09cafa5b0480","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195815-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195815-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--696ebc18-24ef-5bdd-9527-a52e140c10f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195826ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195826ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf16779c-2a0a-50a5-8ec6-8034a10542c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62231c95-47be-5f1f-b3fb-18458610dcbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19584-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19584-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0fd00ec-7a47-570d-bdfe-5da3677052c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19587423-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19587423-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79977953-3c69-5258-b71f-5b4418d740cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 195892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b82e10-0c66-5912-8e43-90ef0f17d238","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19597821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19597821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82793e4-6a17-54be-a104-af139808853f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 196233-regions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196233-regions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--451da254-054d-5170-8f07-4dd8ece67b4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1963852-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1963852-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f133d63a-3b5d-5d2b-bd5b-29949e216cf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1964-global.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1964-global.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8980d10-af14-5596-a413-feed7bc8e0ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 196428-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196428-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6aaae9d-5bca-51ec-94b0-d1209ab72be3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 196932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87caf2c1-8f0d-5b4b-9ccf-2214f713b627","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197203coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197203coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3633ae5-9d27-503a-8557-733398235f45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197228coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197228coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddc2164-8c37-5eef-b4f5-865dbb14b54a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cffeb2a7-62b6-5d80-96b4-02040d607f63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19725-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19725-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1b496b-6850-56ff-a1ca-0dfc305711cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197258coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197258coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72ef83c-9a61-5d53-9939-a527f53241f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197280-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197280-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbdd7327-8dff-5080-974c-f7fae93d728a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197283t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197283t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53cdfae3-be08-58f4-8d0a-61b7c3b4b8f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197302-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197302-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c3d649-6db3-58a5-9894-9b20f04630b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19734956-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19734956-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842f25ff-7031-54fd-affb-2e615d8faa8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1975312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1975312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9c8fd4-8425-57ab-aac2-0907c38d3e8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197533-bybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197533-bybit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--749a37cf-03c0-5039-9cdc-4c39f2aebfe8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197538-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197538-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5778e834-a6a9-565a-814f-c233f2185441","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197584coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197584coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ad4bc8-fe9b-55b2-8d35-5ef79e138edf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197621-outlook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197621-outlook.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f87b29b-5466-5573-9115-43d7cdf2fd24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197824-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197824-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81451600-79a6-5e36-b92d-32d0b0e7dde7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197825-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197825-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--276c6928-cfa8-5beb-ab1a-84187abd0f71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19784-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19784-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c4e37e-e030-5bc5-ac86-99057ed1b6e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 197845-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '197845-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16bf4917-ed7a-5a78-b781-0cde5cd10e85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1978marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1978marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6279e36-01e9-5798-8472-2caa86fd6aa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19793524-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19793524-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3253d403-0316-50af-870f-caefecbe5c51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19809732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19809732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f1a76b-4a6c-50df-8bd3-2fabf18aec6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198221-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198221-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7d2022-d7f0-5052-a053-13d42a2ff40f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1982481762.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1982481762.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31150040-ffd4-5888-929c-d090d297bd61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19826726-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19826726-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af3d963-6b66-5e04-b764-149700b75173","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19828361-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19828361-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd64e4d6-fee5-5707-baa1-c26c292ea0d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9720a605-4d3a-5da1-8f23-c6549f587b3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198337coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198337coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4479ae1-2802-5506-9ca2-97d83e000feb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198345-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198345-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f696e39-50ac-542e-9de2-2445a3e3d59c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198367-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198367-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc62a49-4f22-55e8-8553-d9111961028e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19839028-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19839028-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae8060f-a3e9-5385-af57-489a6dbbd6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19842-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19842-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27273528-911f-5d78-9eee-d1cd6c6f2bce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd2ec76-22ab-5f5f-9697-05273e9bda40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1984994-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1984994-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73879222-e3e8-5da7-8dbc-b0dcd0c5a03b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198526-oneviewtruist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198526-oneviewtruist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ef4eed-cae3-53ef-bd4e-4885e4732c3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198549coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198549coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4d71ff-e065-57d8-9554-00e8db7ea0b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198572-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198572-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37686342-87e4-5481-a865-6cf91108df39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1985915-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1985915-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d06cac-2024-5bb7-afd0-c0486b190262","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19859271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19859271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee80130-69bf-568e-9b57-0ceb813f5788","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19859472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19859472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2da6852-1e83-5d23-95d8-7b259171e446","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19867422-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19867422-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e18f77-6a0e-5f4e-ac76-1813794d7d82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19869326-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19869326-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bcb4bd-5b7f-58bf-b8f5-c683d5bae839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1986marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1986marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45cae1cd-1944-5de8-b0ac-1045b1a82c61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 198711coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198711coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ef5508-dbbe-58cf-add9-987a2501bdf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5db9624-696a-576a-b44e-64e1436edb20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1987265-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1987265-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--581845bb-b3e4-589f-9a5b-c7302bda51a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19872855-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19872855-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea1be0b0-534a-514f-a3ca-ec71c6135cc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19873448-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19873448-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32902c3-4ca2-528f-8ee9-f154901e1ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19886271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19886271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--027b92ed-55ce-5e51-8d96-515da6b30133","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19892617-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19892617-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3e0739-d596-5ab3-b1c3-82f36b110204","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1989marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1989marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d134bae-9352-531a-a67e-77164c004caa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19903764-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19903764-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--777d8028-e659-5dc9-8aff-4c167901cd6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1991marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1991marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a092425-9f7a-54f4-b17c-e5afcaac6c33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19920-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19920-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a504bab3-c42e-5a78-a2b5-d0deff1afe27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19924823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19924823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc219d-1932-58ee-bb47-1d72bfbb0a14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 199273t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '199273t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed570a73-e110-592c-a7e9-8108251be3ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19928543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19928543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458c40bb-4dae-5c46-9543-8709ce2d07d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19934702-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19934702-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad36236-241c-598e-93fd-eb216d0a6ac7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19934792-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19934792-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5237ca-4e98-56c5-be53-ed78b7dc1aa6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19939-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19939-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be2ef2be-8dcd-5bca-bb28-c19391b278a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1993marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1993marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f21e98-653b-5477-9e0f-95420f561a0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 199425-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '199425-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e1fc78-81b6-5395-a425-ea5ffeb7068d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 199500-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '199500-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c63fa9f-7c8e-5c97-9554-14246f841f65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19954-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19954-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a2cfcb-d098-5b8d-a19d-eed2789abd8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19965-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19965-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53db9532-faeb-55ea-885a-1ccd9ad8c823","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1999lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1999lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b56e5973-7782-53fe-9fc2-07173263832a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19euo1-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19euo1-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef714a4-4424-5fd5-8ba7-b7b43a360249","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19pharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19pharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b076bd1-c081-5768-be56-f97e3eea89fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 19pharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19pharmacy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bcdd3d-94d0-5b62-98c3-95122f245f7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1a865b4f4b5053a17a98cdd29237c38a.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1a865b4f4b5053a17a98cdd29237c38a.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0598e98-dc8b-5f87-9987-bce206469d0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1acey.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1acey.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01f438d-189d-5ce5-a326-4a93163792e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1alert-einterac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1alert-einterac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c64b1d8-2d7e-544b-94f3-c2d7ea202df7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1banorte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1banorte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f405ba-9f82-56b5-bebf-810275640532","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bestik.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bestik.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f40636-407c-59d7-9518-213fbe9befeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1betexper-girs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1betexper-girs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5a8d71-4e07-5e25-8726-0c538460563b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1betwintu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1betwintu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb06671-396f-5bbb-bca5-4ff9aa678c97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-banking-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-banking-secure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dacc011-2cce-56cf-a073-62150a60938c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-banking-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-banking-verify.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c3b0a6-66c1-5408-8c81-2da16d16da14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-mobile-banking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-mobile-banking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef5e27d-fb8d-55ff-bc80-e926ef3f79af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-mobile-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-mobile-secure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f7f19f7-de70-55d0-9520-ebd1761f7a0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-mobile-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-mobile-verification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c610a74f-4dd4-58b1-81d3-42052a47aec9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-mobile-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-mobile-verify.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad866e35-e4eb-5219-993a-827dc8168a73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-mobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-mobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f48a5c-c625-5d27-a629-4daceea82cf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-secure-banking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-secure-banking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4805088-8eee-5a4a-b27b-50fc549689ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-secure-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-secure-verification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--675c8849-5b1a-5d24-b503-400bd8a3c0d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-secure-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-secure-verify.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee64db9-1232-55e5-8c07-4b4a39951980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmo-secureverification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmo-secureverification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3438e9-be85-52c1-9990-15ef38184992","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmologin-dsvl2k9mc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmologin-dsvl2k9mc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--951dbc91-4bef-5a1e-b4cf-a99fe88b70f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1bmonlineclientuid.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmonlineclientuid.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e292ba50-69e7-52eb-bde5-d05ddfca3d40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1casebattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1casebattle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd997d62-1424-5edc-a0b5-f730ac921b03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1cftplatforma.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cftplatforma.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a899433-f8bb-5df5-ac3d-d63deea29b19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1co1n-sol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1co1n-sol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c38762-8073-5bff-9029-e8927b73ade5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1coin-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coin-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c43c3866-58c2-5dc3-85a6-efb22a011432","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1coinofsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coinofsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d4c60e-bb7d-5d7b-ae20-0ce1b5606839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1coinsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coinsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29281ab4-59c2-5e35-88ca-2e0b7a3cfece","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1doc-shop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1doc-shop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89adf9f-e68c-51e6-85e5-eb113c7314ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1fedex-express.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fedex-express.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea13ad4-f140-53df-9796-b43df34e43ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1fedext.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fedext.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4e260a-00c6-5dd0-990c-5034467ab711","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1game.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1game.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9048bb9-b7b7-59ff-a289-7ac68891dc29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1getgems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1getgems.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d30789-a8dc-54e2-ab05-2a6f944617ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1giftsbattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1giftsbattle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053b1f52-d251-584d-bae0-cdf7f50891be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1hdtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hdtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c26d09-ff33-53f8-a0b8-2dac8ba7c850","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1hive.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hive.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85187c8f-cd26-5f24-89a3-bf516833b3da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1ido.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ido.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ea45c1-3bb7-5220-a048-fe2d123c1a98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1ido.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ido.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbfd6ce-4463-5f1f-9312-eb3150a44ba6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1idofi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1idofi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7514b27-1d61-5612-a80f-458e1a6bf745","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch-app-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-app-v3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9de778a-de18-5f16-af55-c3a03da6cd05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch-dex-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-dex-v3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1f4fb6b-71a2-5f92-954c-9a8ea6fc1fb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch-event.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-event.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2ccfc5-704d-5163-8117-b2f7a78701cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch-v2-static.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-v2-static.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--222fcd9f-f80d-5659-a623-d814373da928","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-v4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0757af00-8f98-507c-9222-877f6fe31b3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inch.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b027a37-208c-5cb9-ab14-5cf52f627166","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inchclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8e9827e-d4dd-58dd-b991-85881b1770bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inchclaim.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchclaim.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40daabff-b691-5eec-9362-22abc4e90505","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inchdesktop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchdesktop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09fcbbd5-05c2-5b5a-9297-9740a3a9d65b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1inchprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf77009-0719-57d2-8462-eed7aa1c3d67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1iquifi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1iquifi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5666b2c0-2bf6-56b7-b5bc-2d4f7cb8b238","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1ite.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ite.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c20501-de06-5d93-92ac-8c40ee3c53fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1ite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ite.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7208f26a-3e8e-58af-b185-f6ed0576374e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1ivepeer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ivepeer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--621c7981-1a0a-5a62-a9cb-4282fda4b087","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90971cff-124e-5e4d-b43f-8dcb19591090","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1krn.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1krn.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2010799c-7278-5990-a8ba-9ba4e2b5792d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1lifepharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lifepharmacy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f14a5588-af8d-5933-96e0-3628d694c1c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1line.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1line.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4287a1-032f-511c-acfd-250b0a9e2935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1lnch-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch-v4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4c0ff4-fb82-578f-8029-2d25ed916c84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1lunabet-giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lunabet-giris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d1fcd8-006c-550f-b990-17349d8395d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1lyhtyr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lyhtyr.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff25995-7a39-51fb-a19e-37c12e2d7f52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1m50ku-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1m50ku-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f613f4a-feb7-5b4d-a52c-5ba2ee70328c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1medicine.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1medicine.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3346c9e-50f0-5355-8b24-4f3e62c51b4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1moviestv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1moviestv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--534597ff-dfa4-583c-a70b-ad32ad3b6e6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1movietv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1movietv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--206bbf63-a2db-5cfc-8bb0-3a7cf9a99e92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1mycibclientuid.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1mycibclientuid.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20df22d8-83e9-577a-b475-a1eb7cc8af8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1mycibclientuid.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1mycibclientuid.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba35ab8-7814-58f9-b7b8-01b387030baa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1obobase.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1obobase.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa042f9f-1019-58df-9408-1d55c4b4d26e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1obobase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1obobase.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7379d293-ac71-57b6-8ce8-00452f28b97a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1oboswap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1oboswap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29fe630-7f60-57e0-8fbb-d261564d6f8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1pharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1pharmacy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83888cee-ab26-5064-808f-7c2dbf207b9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1primeshowtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1primeshowtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b26f558-c8b0-5c3a-8c46-e515b7b41a3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1radissonbet-giris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1radissonbet-giris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3da17626-98c7-577c-942f-df9f479f675f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1rbcbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rbcbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5496ed85-bd75-516f-974d-055169d4f370","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1rbcroyalbankrefund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rbcroyalbankrefund.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2a3680-b0ae-5988-b2f5-083ae21ca922","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1red-uk-casino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1red-uk-casino.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f710e1-eee4-56cd-a3d0-181ef9ddfb99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1redbetcl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1redbetcl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539d3e14-b4f2-5ff9-8c30-2c4f683ae159","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1redcasino-uk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1redcasino-uk.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fb771f-31b1-5fd4-8338-346401ff4720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1secure-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1secure-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af16cceb-a349-5166-b7fe-9399e9df29e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1shipment-fedex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1shipment-fedex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--416e6717-4c72-5394-b370-04ed2f8c1d2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1showstv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1showstv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e1e336-6391-5886-8b2f-24cb9ff94f00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1smart.fund","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1smart.fund']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11289388-841f-5957-a3e5-b4213e285bb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1stcitizen-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stcitizen-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac72ae8-5876-5559-99dc-7d8c142a0382","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1step.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1step.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce36049b-c48f-5515-809c-105535830101","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1tamilblasters.dog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tamilblasters.dog']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47d1a79-81da-5b86-aa77-ec723debc2f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1tamilblasters.luxe","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tamilblasters.luxe']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cebc846-1f09-51fd-af6c-7b26a19c36db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1tamilblasters.republican","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tamilblasters.republican']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6d5d02-e7d4-5156-9efb-80255ae00d12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1torzon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1torzon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f78514-2813-5379-9d63-1026ce95eaba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1track-fedex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1track-fedex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5fdcca3-613d-5c29-858a-db18794a0ac2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1tubetv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tubetv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe31a27-e6d7-583c-8730-f5ad86c070e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1unabet1000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1unabet1000.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d77fb2e2-a2ef-5034-aae8-b0ebcf55e070","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1unabet1002.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1unabet1002.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99892ee-7b70-511c-9d70-ea2d3602520d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1unabet954.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1unabet954.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87a61626-2188-5f8d-9154-faa9f547d7ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1vpharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1vpharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--398e57c1-5b26-59f7-8e82-61cc67329e23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-1wino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-1wino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ae89f2-521f-52fc-954c-07d6f4071cba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-ar.gratis","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ar.gratis']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b51591-58e9-5e64-826b-fb121b7570e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-argentina-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina-bet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6546d688-e512-5be0-bd59-dcc37c371406","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-argentina.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9da5c366-88cd-5b85-9109-405c7346fb41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-argentina.gratis","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina.gratis']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85fa4916-0442-5990-9097-7be002952366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-argentina.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentina.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de4bc3f-279b-56aa-8409-b8336303fdb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-argentino.gratis","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-argentino.gratis']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e82fe07-db27-5644-b004-1c33ccb19ca3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-bet-giris.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bet-giris.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce222f2-4b2d-5c5b-b09d-89504fcffb72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-betting-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-betting-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deff1d6-9d9b-5014-8b4b-64ff32907bf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-betting-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-betting-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077b458f-df34-503b-b4a5-a01da06e210b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-bolivia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bolivia.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6cab72-0d04-50ef-9e58-28b7e6083cd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-bossadres2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bossadres2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2537ec65-596f-57aa-96e9-b74ef7c0c5e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-casino-argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-casino-argentina.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc08ddc4-3bb4-51c1-a871-c8f555fbf229","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-firstbqhis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-firstbqhis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852b68fb-89f3-514b-a9be-8b0c61579423","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-india-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-india-bet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83544ae6-798c-5f68-a078-7735d8096a1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-india-official.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-india-official.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60577eea-fc31-59e9-bf51-037fe5951644","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-india-sports-betting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-india-sports-betting.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09363941-e921-5535-ab95-64fe901e06d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-live-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-live-bet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d1a373-2970-57cb-9b47-0e39303d05d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-live-betting-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-live-betting-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6feaaea-7cda-50f2-a72f-e7cdc2d7981d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-live-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-live-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e948c1-f181-5cc4-8094-9a9c39a820c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-oficial-moldova.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-oficial-moldova.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada03eb7-0651-5be6-b34a-37e2ca6023be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-online-betting-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-online-betting-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902d26c8-5bde-5dad-a726-92e6067e11df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc90d9c7-7ea6-5199-9408-8715e86f7f12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-simdigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-simdigiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1378269-482d-56e6-87e5-0c2ac2e3e758","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-sitessafe2026.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-sitessafe2026.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28651728-6db6-57c2-a7f3-271061b0cdff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-sport-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-sport-bet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52191bc-8efd-52a3-a707-f1b008643bc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-trwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-trwin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62f0dd0-67e7-5105-a3d9-beba4c629561","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-uzb-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-uzb-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01542021-2494-5019-8324-c4c0bff2e564","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-wingiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wingiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84df797f-e8aa-5fdb-bfce-fb5edfeb3888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win-wins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-wins.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898f2310-dd1e-57e1-b3b8-e60e59546514","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1win1wingiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win1wingiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499fcfca-a728-56e8-87cd-1e85609d4cfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winargentino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winargentino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c9988a-1d32-5d71-8506-cadd8167e22a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winazer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winazer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ba8153-5a71-54ad-86d9-ba22243fc8c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wincas.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wincas.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c70f05d-1d13-5c1c-a7a8-f601720a511f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wincasinoonline-colombia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wincasinoonline-colombia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64bda746-13d0-5869-885e-b0ce2bdee8d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wingameco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wingameco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de34ac7-f8ba-50f0-b1c3-0dd0102e87b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winofficialcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winofficialcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80fddea-7bed-5052-8751-2b5e9a2ec74e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wins-bangladesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wins-bangladesh.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba2e99b-001a-52c7-9d27-5dcd2b9338e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wins-thailand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wins-thailand.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c9da6e-a26b-51f1-a4fc-8da6849a1633","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winsingapore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winsingapore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55ed803-9ecc-51c3-a888-d5031cb915cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winsmalaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winsmalaysia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90510ade-b92a-57c2-9c96-5e50611fade1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1winspirit-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winspirit-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb5b73a-318e-506c-9ec8-300135110061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1wn-sinirsizerisim2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wn-sinirsizerisim2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f795ef-5c63-5b1a-94d2-c100397728be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xaffiliatebnd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xaffiliatebnd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ea058d-2d71-542b-bd92-03a314bb003d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xaffiliateind.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xaffiliateind.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977b8390-bff8-52d7-a318-d70f63650c81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-1xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-1xx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24605788-addc-5dfe-93e2-94ff900c8e13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-argentina-oficial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-argentina-oficial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5661a86-210c-5611-a4df-42fa174aeeee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-az-giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-az-giris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1467307f-249f-5e34-92ae-09fb349e7ed3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-az-giris3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-az-giris3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00078fc7-2a1b-556c-adc3-2c70150a84d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-az-giris4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-az-giris4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c375915a-1383-52eb-86b3-91c68ae7e4b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-casino-kz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-casino-kz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2a0a710-8ddb-567b-9983-7a06ea7c3cc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-dz.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-dz.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebc4c92-6499-591f-9b18-f468f75690a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-dz.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-dz.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--429b9f10-92f9-5e2b-9445-5bf95c513965","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-serbia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-serbia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6c9e79-5bb2-5a59-9d63-bc7daa488e88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-turkiye.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-turkiye.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db1a0cd4-6fa4-55ff-8aec-68c348f5a16b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-unitedarabemirates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-unitedarabemirates.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e0923e-79dc-521d-ad2c-c0ef7a0f2091","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbet-vn.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-vn.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1eb857-0333-59e7-a837-a335d97e9fc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetappnp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetappnp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c9f786-31d4-5266-b039-b6123db96db0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetengbd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetengbd.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7ba6af-fcbf-5635-b00c-1dd731121070","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetindonesia.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetindonesia.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6d688e-6157-5b0b-9436-cbc229948edc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetnepallogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetnepallogin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--255e43b0-b5ec-5602-896d-ee1d9c96197b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetnp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetnp.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599ba1a6-e302-5df1-9712-aef686feb6b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetone.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetone.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565199ce-d2b9-5728-99f4-0d3afb8003c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetregister.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetregister.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf06e78-86d4-57eb-8d29-ff0c1e0bcad2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbetresmi-tr.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetresmi-tr.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9cff54-fa49-5611-9bd5-1d668d28f9b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xbettogo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbettogo.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c93545-3ed9-59df-898f-3435ed79793d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xcasinoar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xcasinoar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899efd64-3152-5f80-b86e-bbfebdb36bab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xegypt-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xegypt-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0507124-89c7-533a-b84a-48d7daf8a09f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xlk-aviatorplay2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlk-aviatorplay2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db7336f7-4ac2-5fed-a40a-db2ac9ddf84b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xlk-aviatorplaykd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlk-aviatorplaykd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db68c5fc-6ed5-5497-9ed0-0c470b763dd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xlk-chickenkd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlk-chickenkd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f556c1c-a8df-5591-b95d-3621c1663205","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xlk-chickenkl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlk-chickenkl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12c8ddb-e643-586f-9fc8-00f00b04cbdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpadu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpadu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ee7826-60b8-5495-8adc-616845d5a0eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpartnerspk-contact.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpartnerspk-contact.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7b62ad-e6d0-5092-b9da-20320d966d80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpk-aviatorplaykd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpk-aviatorplaykd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92e0b53-891b-598a-bf21-8208f35eba7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpk-bonanzaplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpk-bonanzaplay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e562c08e-6b2d-5ccb-905b-6ff74fa7dbf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpk-chickenrunkd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpk-chickenrunkd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd9c735-aa5a-5a20-899b-56010b04c79a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xpk-chickenrunkl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xpk-chickenrunkl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef73747-d06d-569f-92be-e7101a219a9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xslots-casino-arg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xslots-casino-arg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1530d89d-ac0b-50a7-9df0-f7d9371eb150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 1xslotswinar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xslotswinar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecaed1e2-e216-5af9-b9dc-141bb984cf91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5cdb09-fef2-569e-a2e4-ff3fa0deb951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2-kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d089f483-8dee-5d2f-adb4-75c517e1a270","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2010316-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2010316-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0de471e-2690-5110-afb7-d301a6fe28e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201282coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201282coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab5824d1-5e34-510a-9d9f-be110ba5585d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2012coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2012coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--261ecda8-5804-567b-8b6e-a9084ea87f4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201378-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201378-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925961f9-b0a1-5426-993a-b996c4d723a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201437-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201437-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb5dce4-a0b5-5f72-94b3-fddfa3f04a49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201827-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201827-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19ae166-2385-5fca-8442-5a876032698d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201854-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201854-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed44b93b-ebf9-5533-bd6e-2ee288e30d53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 201855-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '201855-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d5dff6-cda8-591e-99b7-797920994159","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2020betawards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2020betawards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6df2cef4-3859-57b7-8c48-5d791dc40cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2022bucketlist.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2022bucketlist.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e05f5b-dee4-5cac-834d-26f4357a18ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2024-25returnaccessment.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024-25returnaccessment.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0db6f87-f3a1-59e7-9d22-679a0244d4a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-basvuruekrani-toki-500bin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-basvuruekrani-toki-500bin.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6aae033-59e3-5aa3-b1b0-29c28defd4c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-activities.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-activities.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8436cf27-7352-5eb6-8fa7-54a8070d5aca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-activity.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-activity.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd162bac-8d89-51c6-b221-497500dc0081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-cases.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-cases.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6987f8d8-ccb3-5ca7-a634-82afb6c50f5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-loading.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-loading.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b63513c5-a2a8-57c6-bf42-9a8e97f231fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-report.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-report.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93fdc54a-0984-592e-9cf2-f7c95fa797fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelink-summary.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelink-summary.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d789b9b6-5e7b-5d38-b0bc-4955d0dce807","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelinkoutline.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelinkoutline.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--145e4734-885a-5a30-8847-4ae1684785e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-centrelinkreport.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-centrelinkreport.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99395c6f-905f-55b7-83c1-9768803642a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025-report-centrelink.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-report-centrelink.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36ef337-5842-5b5f-8e09-9b466c570479","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20252-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20252-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42d06c6-b9f3-54e2-99f8-be53b9c7f2cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025adobe-home.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025adobe-home.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d619a69-2def-5331-8b4f-80f7d2a2a7d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025allocation-info.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025allocation-info.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e8bec9-bd64-5a42-ba9a-10940ec66989","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025assessment.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025assessment.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cf7d4e-1926-5587-80fc-18c7bc92d263","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025au-onlinecentre.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025au-onlinecentre.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4214f038-230e-54ad-91da-55040451c147","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025centrelink-activity.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025centrelink-activity.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a335fc-0bba-5690-8f05-4188ee7d4ccc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025centrelink-notice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025centrelink-notice.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc977deb-43ba-5f39-b4cb-75a6a41e3333","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025claimsnotice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025claimsnotice.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3efc66-53fb-58a3-a1d0-cd5c7fedd185","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025contactsupportsession.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025contactsupportsession.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6db52d-5989-5dc7-b431-df97e5da7edd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025costcoreward.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025costcoreward.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82150f2f-a739-515f-83d5-26f39fbb7daf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025incomeservices.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025incomeservices.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06edd6f4-d479-565a-b810-52a98395e9ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025irswebsiteislive.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025irswebsiteislive.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a2e280-2a66-56ee-9c57-69c0d06f4d69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025live-sup.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025live-sup.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2433a04-f7d1-50b8-96af-c2cfe66dd703","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025membershipclaim-costco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025membershipclaim-costco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f8db71-666e-564b-b395-0fd3927dd553","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025noticeclaimsinfo.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025noticeclaimsinfo.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77ae537-3b62-5c51-a4c8-a83530024431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025refund-assessment.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025refund-assessment.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d00013-b3bd-5600-ae61-b97574c2a8fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025remisescostco-epiceriesinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025remisescostco-epiceriesinfo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e4b251-118d-50bd-88ec-212975649b89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025report-centrelink.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025report-centrelink.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b6d0c4-1108-5792-a384-d058af08018b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025reviewportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025reviewportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69365907-a1a5-5375-936d-56ad24d3385f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025solana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025solana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89bba29b-5f41-5ec2-b21b-e58f001be84d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025statement-centrelink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025statement-centrelink.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38786e58-457a-5396-9f46-c26365b2fbf7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025statement-centrelink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025statement-centrelink.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cb0cdee-f330-5157-a486-f433fb155eb4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025statement-mycentrelink.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025statement-mycentrelink.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0388d7-4787-5230-b09b-171e1dd4fcae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2025statement.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025statement.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e00e9569-4b83-55bd-beee-626cba131758","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-basvurum.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-basvurum.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239e3c84-b0cf-53d5-af06-2e2a72cc799f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-betpas-giris-adresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-betpas-giris-adresi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b4f69a2-0bef-5841-8c3c-5716b70123e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-bitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-bitcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40baf68-ccc4-5195-ba3e-5373aa1f3b7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-casibom.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-casibom.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e8f3e8-e0cc-5887-ab22-ead81435c8ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-etfupdate00.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-etfupdate00.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd998ac-6705-5b7e-9f14-698bae5bbcbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-giris.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-giris.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a2c23e9-600f-50e7-88e6-7eb67aa56259","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-guncel-tek-adres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-guncel-tek-adres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7e3e6e-db61-51f4-980d-ce6375047a44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-gunceladres-starzbet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-gunceladres-starzbet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60f12b8-a4dc-5641-ba96-57aae38373b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-official-pusulabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-official-pusulabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a286b5e-990b-52f3-8d91-1630bc138a81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-online-notice.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-online-notice.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baa0aeff-ff27-55a6-8599-2dfda0f5845c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026-starzbet-giris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-starzbet-giris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a351bb3-bb2e-5ef7-96c6-c762e93de115","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--718776ef-7c66-5a23-8459-fecb8b3962d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026583-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026583-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bce84f-b021-5c46-9b38-218d0431dce4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026accessnotices.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026accessnotices.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64370692-0f17-5494-b7e2-4d57689b08a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026bahiscasino-aktifgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026bahiscasino-aktifgiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592c36d6-f7fd-58ce-9a6b-b82925f9a059","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026betmarsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026betmarsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5103769-25b4-5e81-bc50-271e8bbd0890","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026cashbackcostco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cashbackcostco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bfcc33a-2969-5e5d-ad75-2306fa443b69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026cdrevnuagnct.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cdrevnuagnct.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dcea76-5d07-5735-9bd1-ab9916643c30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026centrelink-notice.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026centrelink-notice.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fd68ba6-292a-589a-ab11-65dec3870181","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026dinamobetgiris.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026dinamobetgiris.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b0e815-7f56-552b-8b7f-ece11a1a6297","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026evfirsati.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026evfirsati.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--990ad269-ba93-57ee-ab66-b199151c33ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026evkaydi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026evkaydi.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a267e51e-eca0-5437-9229-3ec7d4cf4a57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026evsistemi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026evsistemi.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f140e5-1e68-5f57-8163-350d31e84f19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026holiganbet-yeni-adresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026holiganbet-yeni-adresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfcdd13-8f3f-5c84-9942-be95c971528c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026ilkevim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026ilkevim.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c63fda15-1f77-5bcd-81b4-5db56aa67cfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026imajbet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026imajbet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b94524d-9aba-501d-82b4-2d017ad79eb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026jupiter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026jupiter.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc9cde8-268f-5ef2-b5a3-62e80a38f9a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026konutfirsatlari.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026konutfirsatlari.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c45ac1-1fd5-5f6c-900c-f910003902d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026konuthatti.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026konuthatti.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe865baa-cb3b-59ed-87bd-3c2d1ec443a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026konutprojesi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026konutprojesi.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e901cf-81cb-5161-b406-5f74f71fcc92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026lordfilmserial.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026lordfilmserial.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543be3bf-0090-598b-9e5d-c3bbf8e6fb5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026medicare-notice.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026medicare-notice.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070565f4-7155-5470-a40c-e60230663281","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026official-holiganbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026official-holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163bb6dc-2b6c-5d4b-a933-e357ba3a9b15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026onkayit.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026onkayit.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4d836f-1e31-5c51-b90b-717d257f119a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026tr-pokerklas.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026tr-pokerklas.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35afa5fe-8d0d-5141-a760-23408720a7d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026vip-holiganbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026vip-holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72c50b6-77cd-5e70-b5fe-5733f4e72e59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2026webtoki.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026webtoki.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae7b411-cd4c-5348-8704-2ea5dee46903","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 202871coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '202871coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2809b3-0fc8-5300-b8a9-eb7d052c6715","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 202992-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '202992-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458bf5b8-2aa3-5093-b4c6-12bc041e40f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 203022nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '203022nexo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e2f26b-aa95-51fe-928d-4c7cfc456f14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 203492coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '203492coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70445920-df90-58ee-83a2-d355bcceaa35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2035491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2035491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb59edb-6f13-5a56-9406-217fd2fd209d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20491.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20491.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0338181-0479-572f-b368-af0a0305821a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2049812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2049812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf781fee-caed-5ec2-bdf0-31f4971b8a2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 204998-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '204998-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b0f126-47b0-5c75-9487-f2621b9a8159","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20548-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20548-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4648f987-7a20-5ed3-80b0-f81075977424","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20549-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20549-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f79e78-b351-5657-9737-a2c21cbd40ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 205865coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '205865coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae4abadb-4b2e-5538-96cf-787895205ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 206142coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '206142coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0569c871-1c1a-5383-bf59-c0bd9663790d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2063marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2063marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2661fa4-9732-530f-af14-c1493f2cfa21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 207268-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '207268-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85c8827-de84-5b48-b958-2c7be87d698e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 208391-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '208391-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad64fce-4b39-5db3-807e-054e6abaf53e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 208972-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '208972-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92604b97-8c15-578f-9320-afad954b8623","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 209110coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '209110coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3583b7b9-4c6d-5232-8a34-18c3a0a2e8fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 209153coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '209153coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5f696b-c6f1-525c-9ab6-7c988122c4ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20931-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20931-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c9aaa7-cbb0-58e3-86f1-dec480717354","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2099lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2099lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06edfd2e-3e81-507d-b799-517754c27ac1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20bet-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20bet-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d254b00-da1e-5fe8-9506-6be24ac7090e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20bet-es.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20bet-es.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a610d03-e308-58e1-9b61-5e71ca3e98df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20bethungary.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20bethungary.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13abc509-a151-5e27-98ec-d62ac9f9765e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20bets-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20bets-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44c8705-43f7-5fdc-8227-bc36591e7dcb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 20betturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20betturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47a8facf-0c05-5ea3-aa37-99635eaf3de7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21-casinos-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21-casinos-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa379a05-c411-5aea-9302-302ae281355f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2104-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2104-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d730819-edd4-50a2-a68e-917d52ad4878","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 210415-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '210415-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a5cdab-40ac-55ce-854d-1894dcc98f01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 210547-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '210547-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--977e7b26-dd19-515f-ac0f-b0b54d87efa5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 210843-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '210843-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df407b4e-4b35-5b52-95ea-458e3d462e8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 211849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '211849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58831ae6-2d21-5a83-b555-48201e4fcecb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 211metrodc.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '211metrodc.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8609a3d3-8c93-52aa-af35-9e75e43c9580","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2131monster.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2131monster.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2045401-8648-55f3-80ea-356cea209720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 213782-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '213782-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ba18d5-c609-50cb-92d3-9a1cc9185be3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 213789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '213789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d73764-1c72-5173-8728-e6a1ca062294","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 213923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '213923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8d9056-5c70-5d5e-b28a-56b252c8d4e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 214993coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '214993coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bf88cb4-a1c4-5897-a3da-0edc24a2212d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 215728-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '215728-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7537723-13a7-5780-9722-d96be023cc1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2158942t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2158942t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc5a854-1bef-56e4-8ba9-4725c4632bc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 216093-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '216093-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6efcff95-aa3b-5772-9f9f-060e69019c95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 218410coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '218410coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abdac166-5e57-5fea-984e-f66f5e6ad335","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 218753-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '218753-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a39f74-109a-50a1-9b33-8b3769160886","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 218953-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '218953-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1e0c23-ae1c-506c-b5b2-1265a4c748f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2189lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2189lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee0e32-ec84-5b16-a8df-5d65184e76ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21904-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21904-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48c15e90-38bc-5eff-9733-90b618e57e4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 219518-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '219518-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccd03d5-55ba-5f84-9c67-c8ed3a4817ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2198aaaa33a7400de34bbf579dfa0f0b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2198aaaa33a7400de34bbf579dfa0f0b.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3010a6f5-1baa-52e4-adba-6e979c28f5c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21bitcasino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bitcasino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f32d343-53c2-52dd-b92f-fefdb4db5209","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21bitcasinos-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bitcasinos-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f698afc-f21d-56e6-bc07-271b94de7625","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21bitcoinportal.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bitcoinportal.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64958835-333b-5db5-b7a5-b37b33f5a9e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21bmobusiness.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bmobusiness.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cad4c71-b50f-5bd4-bd86-e0c8059e80ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21bmohelpmanagement.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bmohelpmanagement.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb6e84b-b3fb-5350-81dd-31ec648f1425","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21c539024fe9754e37c7a0661eb7d64a.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21c539024fe9754e37c7a0661eb7d64a.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec8b738-dfb0-5358-b169-af26067e05f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21soft.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21soft.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e849cb16-20d5-5169-8fcb-cb884dfd1f74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21stcb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21stcb.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c844a7e-3b2c-51ef-a835-285cc4a9e604","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21stcenturylit.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21stcenturylit.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e308b60-2a04-5fd7-becd-5119990f4214","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21tmmuz-meritking-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21tmmuz-meritking-giris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af84789-0008-5b3d-b9ec-e924a3f7dcdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 21tmmz-mrttking-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21tmmz-mrttking-giris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd3c7a8-6734-5d54-8839-8acf0dddd25b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22-412-test.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22-412-test.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fff4dcc-c06c-5e7a-9df0-8687c9c139ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22093-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22093-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1befabc5-b212-5704-a000-1a9c0141a65e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 220930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '220930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e03baa0-7937-5809-803f-5cefbabd066c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 221493coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '221493coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--907602eb-0a55-55a6-849e-7f2b6bccb0d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 223112-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223112-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--befa81f5-410a-5d49-bb59-b706c1520bdc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 223177coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223177coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b441f6a1-cf9b-5ad6-8dee-f4d84550d06f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 223574-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223574-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb6b687-05de-5abb-9e80-a0580cc8a03e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 223642-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223642-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a1c1491-c888-54d8-bafc-ffe10dbc5c23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 223855-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '223855-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a3cf5b-8d17-5ff6-b669-abc80c2652b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22391coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22391coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a060fc74-7024-5db9-8067-24de88cc85e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 224092coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '224092coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f9af77-1e27-5ffb-a20c-3954f41b2250","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 224571coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '224571coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98309835-0af7-5840-a018-f756ab4be86e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 224572coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '224572coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabe542f-a73f-54ac-921b-dc4143012cbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 224573coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '224573coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f9247e-126c-5394-94f2-6c157bc1ac07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 225739-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '225739-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb60aed-b61f-5e6d-8235-9259ae4a3e7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2259-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2259-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c87e6a7-a0ab-5e10-b3c1-741d6c01bf22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 225991google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '225991google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941f1842-031f-5074-836a-c7bc63db697d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 226472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '226472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b590000c-335c-5539-80e5-9acd2b248dea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 226528coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '226528coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e4c6caa-90c4-559f-a9cb-07c9fa38fb32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2269536-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2269536-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b56771-2f32-5bd7-ad24-ee578d1324c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 226987-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '226987-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dd83b98-e323-5c21-9dc6-391f925fe9cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 227098-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '227098-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5009b16-20a0-5811-b716-9f8957d99d9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2271282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2271282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8861809-e53a-5966-a56d-bc6dbafd66b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 227598-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '227598-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9f5384-708d-5965-a2f3-e076b758abb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 228131-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '228131-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fac3875-eb0f-57c9-bfd4-0fbc7ed774e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 228196-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '228196-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001df614-2270-51f2-9152-3344773cc20c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22862-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22862-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5dfc91-494e-5cbc-8dad-98c20263d07c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 228953-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '228953-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daed738-98a1-574f-a1f4-ed29a45db2d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 229123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '229123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a4af77-77e1-5b33-8271-a06425388f34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 229499-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '229499-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0d0c55-e910-59c7-9f85-310310cfe1a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 229887-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '229887-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af49b05-7ca7-55c3-85a7-7242f00e0947","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22bet-southafrica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet-southafrica.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91352f3d-4205-50cb-acdb-7c9dccec467e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22betonlinear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22betonlinear.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77ce56ff-90e7-5e41-87ae-75ef0de929ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22bmo-business.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bmo-business.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108ff762-9fcc-5f3d-99d0-14a7dd404f8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22bmoclientportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bmoclientportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c26d64-8b55-5868-a1ee-6f6bf0f87522","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 22pistol.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22pistol.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47582074-1edd-5671-bc5b-f1b73045e042","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 230114gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '230114gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37253e0-e06d-591a-8b2c-543848f789d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 230242-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '230242-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca33d800-33d8-59ce-9ec2-cb642eb53ce1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 230951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '230951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38858905-f703-5ae0-a611-7a02878a143d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231478-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231478-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e437a924-fcb8-5c23-b3f8-28616ffbc4f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231560-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231560-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279fba7a-7a6d-5133-9846-71d3ce4ff027","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231677-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231677-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d31300e9-bcaf-5dad-bfd9-5ec321615786","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231837-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231837-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef8140a-3145-53e7-9a5a-999a819dc836","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2318923coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2318923coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b389ea-81e2-501f-928c-51cd4d3b2d9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231978-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231978-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243e7ec2-a9a7-5e49-bf08-df50f36bbf8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 231981-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231981-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb2aa75-8dcc-5ff4-8211-ca3e8ac0722e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 232192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '232192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abfb47a1-dd00-592a-bc74-43da8a04f861","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2333c63b8743fa90d85ca0360d436624.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2333c63b8743fa90d85ca0360d436624.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a8dd05-fc8c-57bc-8c94-9088cb4a3b4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 233541-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '233541-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10666203-befa-5d35-973d-e1efd2b0202b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 233891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '233891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f1fec7-92db-585d-afd2-eb9e1f1c1231","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 233904-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '233904-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666bd7ab-1103-51c7-94a0-2b92867009fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234178-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234178-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ec6a3d-79cb-5a9e-98b5-379da9b9961a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234198-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234198-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ffeb67-4e82-505f-9031-f961a27432a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234210-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234210-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09998d18-8123-5259-bb6c-63b7ddd26894","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23423coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23423coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5217d8de-a5d8-573f-adb0-9db8b1bb1afd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234523-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234523-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--525d3978-b610-5f6d-9940-a4c76447fc17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f63448-0b27-5a7b-9795-c18a79f63f28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234551-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234551-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3823e710-1d2f-50ec-a4fb-c07b55d65cdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234721-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234721-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54e13b60-7a94-51e2-85d8-3b552c75c608","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234822-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234822-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef105d35-b0b4-5ffd-a723-47b0191d39a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234872-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234872-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499260d4-c7a1-5845-bf4d-716185165b62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2788b56e-d1fa-5af9-835a-4c90fcc0b9cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2349129-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2349129-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54c41054-a627-57a4-8251-e1b15e6f8b5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23491294-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23491294-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fe975e6-bda6-5bf9-bacf-90111b3dfbfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 234923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '234923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f94f6c-01f1-5153-98e5-ac5473692fa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2352360-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2352360-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbadd70b-f054-5ee1-9487-5073e11f9f3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 235413-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '235413-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4326ee9e-e6a3-5f1b-b0e3-3dc42fc0591c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 235485-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '235485-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bc97d1-f66c-5df1-a685-01d7d9accac6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2355432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2355432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8524298b-f237-5d3b-9841-406e6191f43f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23562coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23562coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5ef23b-1a9f-592d-a8ef-f842f23c7626","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2359586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2359586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874ccdde-ba1f-5895-b58b-c5e503b25c5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23671-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23671-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a17b52d8-90b2-5c97-ac7c-2a30778c7828","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 236721coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '236721coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212cc58f-9a3b-525c-90d5-69aa98db0426","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 237162coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '237162coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad5f2dc-cde4-52ce-8c19-267936417fc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 237581us-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '237581us-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--008f1cc7-5338-5bb0-8760-0271c22c341a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 237839coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '237839coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32735f8-4b8c-5ac6-86ca-5d809758f6ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 238297coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238297coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959684d4-c1a5-5bfa-acdf-6414024bb260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10774abe-2384-52f6-a8bc-53f0c9ff3997","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 238509-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238509-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62bdddf5-6012-54ed-8cab-6045b9245a67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 238938-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238938-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e691697-be5d-5852-acbf-8ac9b2ccb50a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 239039-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '239039-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b64a68fe-a751-5f70-a883-04c6a3c19446","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f12127-b4ef-5b05-b664-48ca617531c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 239587-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '239587-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227a1fd4-d85a-5bf2-9417-261f7710d930","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 239675coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '239675coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9691bf59-a23f-5ce0-a92d-edcc774219cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 23bmohelpmanagement.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23bmohelpmanagement.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ba6a55-85c7-508a-932d-1687157085cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24-acs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-acs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fe651e-de66-5d2b-8b69-d7d4024e3428","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24-attempts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-attempts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65243e9-bdd4-524f-9219-3749cff47237","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24-icm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-icm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccac27c-a9dc-5b59-baa8-c489f6d7f9ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24-rc.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-rc.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784f697a-dcd6-540e-b896-0c9af553725c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24-work.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-work.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--530cf11d-6f35-58f5-b29c-27319b4ca47b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2402.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2402.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9155f530-9568-5fc0-9ef3-d6b8512adc95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 241059-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '241059-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6d0cbcb-f332-5160-800e-cc8b8743ae78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24182-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24182-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7226f84d-1dcb-51ce-8c3b-d98b6f7585ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 242135-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '242135-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39ebe3ba-70f6-5554-9c3e-178b6fe1b459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 242152t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '242152t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a68cef-49ec-57c3-97b8-d9f004e4fbab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 242423-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '242423-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5efeda8-7d1b-53bf-9dba-fcbee3a74e68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 243659-yahoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '243659-yahoo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9beea5f1-87a0-59a4-9753-6ecc3d0c2cbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 243hazbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '243hazbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66af3cec-9689-5333-856c-368195163994","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 244556-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '244556-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a388bc70-1b6e-5eaf-a396-b738cba2b8e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 244861-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '244861-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df38f155-8724-5255-bab5-db111d12c84e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 245387-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '245387-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f960130-bbce-5515-a26d-d83e2de0c102","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 246377-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '246377-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff9838f-7dae-5065-97d0-fb82f54ec15d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 246508-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '246508-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12833e87-3a0d-58b9-9f72-f77d9dde23d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2467343-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2467343-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7377664a-961b-5c2d-8bae-8a80c77f823e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247-rxstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247-rxstore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dfb64a-3a51-58dd-beda-295c65f5374a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247-worldstore-rx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247-worldstore-rx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc77e806-d868-5c2f-8f74-3a554a884e5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247-worldstorerxn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247-worldstorerxn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71913f96-c571-5b4f-992c-ab5ee83ee8e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247102-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247102-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5e0306e-a866-584f-9d77-13daedf45b38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247184-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247184-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d06f745-0698-5d9f-86b6-6d4752077127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a45fa88-25c3-5dba-bc9b-ed58e2a8a1c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247381binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247381binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c53cc70-1013-5b8b-b8f8-ceca17c015c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247842coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247842coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174023b9-5d12-59be-b14d-f79935adcb65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247filesharing1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247filesharing1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6ad7ec-5245-5e2f-954f-8752af6a65a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247genericdrugs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247genericdrugs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0320372f-eace-57d4-b37f-a2f4fd8c014a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247medstore.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247medstore.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d908c0-056d-5983-a256-13244b7b9785","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247onlinemeds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247onlinemeds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed00b77-4065-507f-910a-c67e14728b9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247rxworldstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247rxworldstore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--266a8259-2c39-5f43-a9c1-65ef3de28a72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247worldstore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247worldstore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812c5b5c-c07e-55ae-b873-52b60614cac4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 247worldstorerxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247worldstorerxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a4c3d3f-e1d4-5562-bb21-aa80f964f4fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 248817crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '248817crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c28381a-7dbe-5b4a-b208-924b3b4167a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2489104-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2489104-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81cfc78a-c397-59f7-86ff-2e9f718e3c14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 249253-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '249253-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f59261e-91d4-5811-bf9d-e201d9a6528e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 249344-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '249344-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd05efb0-68e8-5452-a5e7-994f0f9d2aac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 249741-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '249741-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428c405e-e754-535d-88de-9d82636f26fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2498753-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2498753-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c307b41f-957b-52ad-a04c-cac52747eb8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24apothecary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24apothecary.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7866cf0-095f-5eaf-85b5-45b7b91f5195","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24h-pharm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24h-pharm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8371daec-dcc6-56e3-a7c3-c83bac8e2a36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24icm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24icm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb52ea9a-3752-5650-9c0f-26d5607ba646","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51cf4b5a-cdd8-5582-a1eb-fb65351494cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24paybanks.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24paybanks.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--456c6de8-da3a-56f1-897e-e506af0b6adb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24pill.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24pill.store']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa00e52-ac30-54d4-9609-3eb18e43ae5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24roids.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24roids.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0dee12-ea20-5afd-96f1-79c4a4149712","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24sauvage.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24sauvage.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--915b7753-41a6-5c16-974e-6a9877e25329","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24siteskotikami.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24siteskotikami.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fd16fc-deb6-5a3d-9f39-2f7a0bee5d28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24swap1x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24swap1x.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88a42e7-d258-59f9-a115-1d67f596680f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24topups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24topups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4989302-d861-599c-aaa7-23bf21780b25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24x7cheaponlinepharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7cheaponlinepharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd94e6b-8c84-5360-b736-05bd0958e45c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24x7rxtabworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7rxtabworld.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--349d53f2-fa1c-51c2-9ccb-622b8a968335","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24x7secureloginmt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7secureloginmt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab4be4c-2a4a-5315-ac14-2167fb672c66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 24x7webmobilebov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7webmobilebov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ffdac4-e47c-5884-a865-7b54ff8c5069","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2508lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2508lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0adf39ac-f5f5-5c7e-a823-b7cdf68a72e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 251892-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '251892-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3bf5a8b-a445-5c54-9f3d-c951b1fbd48d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 251892kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '251892kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f27ed2-b56e-567d-82fe-0de8a9a89060","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 251945coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '251945coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9a60f1-3d9c-5e80-9252-86bf9c729e5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 252329coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '252329coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e430d120-09a5-5b5b-9938-6d872a9d69f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 253404-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '253404-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22806e8-d299-5c75-8e66-c28b1c09d721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 253617-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '253617-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb97f79-9f38-5c0b-801d-d33fe44257f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25364-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25364-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b68233-0816-5346-920a-c107dcd232db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 254155coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '254155coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--978720fc-444a-5df5-b905-654baab4f441","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2543748ae2132a8cd141a58df7b77813.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2543748ae2132a8cd141a58df7b77813.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d55fbb-c02e-5ae3-bb54-d371bbc865b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2548185-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2548185-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13b753f-51c6-51b4-a9a2-d5ea74a0bf6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 254831-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '254831-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1f96d4-fcb2-55c4-a91a-7ed1d3fedd63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 254892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '254892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569803b6-2779-5529-90cc-d4e8fdc00e5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 254915-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '254915-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2741d1-9d59-54a8-9a54-0e040932447b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 254915coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '254915coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd68d7-d156-58fb-9fae-bb97e03d6ad3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 255815-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '255815-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668535af-e6b0-5fc5-866d-55a9d23a83c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 256298-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256298-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c9e87e-80ef-5ab9-a374-0b848f532f90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 256439-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256439-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e560f7-1636-5097-8a7f-a207c1f8041c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 256554-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256554-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f618f45-19ae-5829-9617-9752dfe32f6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 256559-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256559-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1928ad60-ef29-5099-8550-b96f7f4cbb2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2567891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2567891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5223ed9c-de04-564e-ae1f-aabe7122aad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2568234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2568234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98453c63-de0c-5a92-bff9-07aaf20050fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2568791-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2568791-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97becbd9-2093-5b52-b499-bfab7164270c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 257138-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '257138-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7db18f-c615-599b-a0d0-367d12eb1617","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 257903-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '257903-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--339f898c-a71b-51cd-b9bb-3e8bcd7bd24e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 258173-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '258173-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06dff75-c407-5084-89ac-2d57ab7c9970","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 258703us-coinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '258703us-coinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32cd1ae3-3fd7-54c1-a870-2cca5daf9e85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 258709-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '258709-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc518bd-ee9a-5839-9e5b-f8f8c3c5d22c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 258721-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '258721-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91653a3-bb65-5625-afc7-5443f9d097bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 258913-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '258913-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88bde68-b1d4-5c51-94c8-5bd8a85dabc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 259704-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '259704-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26d6fae-5a1e-5f42-ac8a-15fa903d4094","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25assistance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25assistance.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df034ae-c25b-53a3-b24f-0c341c8d3c47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25centrelink-notice-2025.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25centrelink-notice-2025.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c91d94f-4236-5c12-bd37-e12509642232","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25musk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25musk.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a999e2f7-5f96-5927-ad75-0ed7e462569b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25mygov-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25mygov-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f33a4d03-df43-5374-ab90-97f366eacc59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25refund-message.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25refund-message.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a7f4ab-d95a-53de-be8f-a3b7cd362f99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 25reviewportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25reviewportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5c23138-b2c7-5d3d-b2ff-84750679599e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 260210coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '260210coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1a3aff-eda8-5ffe-a5fb-3b9db0b13a59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 260758a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '260758a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dac4ae0-16cb-56ab-89a9-d958510c97cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 261364coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261364coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37b64d4-16f3-5396-b856-6828064c5633","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 261732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4916ea29-692d-5cac-902d-96df600760ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 261736-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261736-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257aa8b3-0a20-577a-8be0-8d20a9d7d037","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 261754-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261754-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba9c3452-dea5-5fbe-8150-b192ffe8e688","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 261995coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261995coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852aec90-b7ef-5e9d-99c0-81cebaf20ae8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 263015-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '263015-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--908dd8cd-b61f-58c4-8c33-9fc05f23d5c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 263134-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '263134-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1576f97-e3e1-536b-9b82-911a04c0a690","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2635-truistidentity-verif.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2635-truistidentity-verif.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--730a0262-ec89-55c0-8005-e4f9e7f5c78b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 263548-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '263548-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fa5589-939a-569b-ba73-85b78046e227","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 264819coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '264819coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b18d89c-94e5-5c86-ba0c-b12a0e61a9af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 264betlivo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '264betlivo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a994beed-b164-5332-b494-ee53961f09f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 265627coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '265627coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3698352-ec81-5734-9e38-a403fec1b4a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 267282-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '267282-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef46db9-cc29-574e-ba99-ed7a90f60909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 267413coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '267413coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6916d4bf-2278-5d8e-9e22-80abde117821","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 267483kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '267483kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--468a5018-5d68-58c0-a660-e527356eaa50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 26794-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26794-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2046126a-98f0-5edf-a1bc-4e055aaa767f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 269353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '269353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c93a8569-2e5a-53d0-96d5-7de73d896b27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 26double.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26double.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c908a37-cd6e-5a47-b8dc-6f1345f97685","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 26kra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26kra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f0e51b-efc7-53bd-a442-9a1323cf2677","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 270330coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '270330coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdf1bf2-e36d-542b-9db6-e98b50470721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 270863-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '270863-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53820cbf-6a3d-5879-83e1-32a1181a46b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 270893a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '270893a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d434c3d-0c19-5e9c-9f12-95fb65e1ad4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 271092coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271092coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ba1147-7009-51c2-9cd8-ef18bfc24b86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2712123coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2712123coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1f0089-61ea-5551-bd91-2ee8c75845f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 271429coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271429coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364379fd-5542-51ce-98fc-c5b8656649e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 271496-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271496-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6eef87-cda4-591e-91fb-48f6abc81589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 271623coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271623coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94b7546-d08a-5294-bbbe-e1aea2b53913","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 27185coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27185coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad73faf3-3aff-50c7-bbc3-4a6506b447a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 272462kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '272462kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd586c1d-6cd4-5c63-ba67-323fe8aacb84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 272519-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '272519-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a42871-5929-5ad6-ac60-4d5c03fbb90e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 273731-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '273731-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b7694d-7a90-5d05-b924-7731975ce06d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274117coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274117coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3420e4-037a-525f-8a5f-28466fbdc8e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274117kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274117kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e97c3-bc64-50ab-9a96-1211f8acced4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2743159-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2743159-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6980d6c4-5084-52f8-afbc-0bafbe0f33f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274432coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274432coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3161bbbe-96e1-5f43-baed-17cf96740b34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274627-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274627-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--491d2740-d7cf-5f6b-be34-961c14d20e8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274824-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274824-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c14048-41ac-5fb5-b3fb-d71ee6a033c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 274909-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274909-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb752943-393f-5973-8010-6edb2da65c68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 275668-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '275668-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfd5e33-03cd-5ae2-b348-40b794ad491c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 275669-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '275669-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442afbed-692e-55d6-a487-3b6add2b7fdc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 275929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '275929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f331028-eea5-59e4-a47e-be47c62d9768","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 276498-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '276498-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a8f597e-569b-5179-a623-aadb21c73728","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 276592-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '276592-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7940ce-04d3-575e-878e-3fed6a5e94d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 276640-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '276640-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27037ecf-97f5-50ec-9844-cbbb2373d8bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 276912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '276912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257dc67e-57cb-58a7-a4e5-05738bd90927","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 27750-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27750-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6463d872-5e60-5399-88c6-9f9b721fed33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 277823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '277823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42115dcf-27ac-5cb2-8672-ee9aecf6d050","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 277834-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '277834-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c22177-876b-50ad-a15b-c64b0ad96e32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2783815-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2783815-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812ae741-eb42-5b86-a9ef-36a38b32bd12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 278491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '278491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bfaa64-8169-5a80-95e6-c94aa49b285d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 279136-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279136-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6db1104-36ac-51fc-8487-c553674b7eef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2793-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98d2bfa2-4079-575a-b816-f99b0c632621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 279373-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279373-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72dae8ca-6b5c-5e39-b8e2-c5678a1c1254","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 279423kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279423kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a312d4-adbe-5136-95b3-f5e1644e793b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 27954383-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27954383-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135730d-9b13-562e-a366-d8f00b7f4318","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 279betlivo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '279betlivo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ed0f30-e8bd-563c-bd88-d2fe32a32023","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 280252-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '280252-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a2628d-5f55-5459-ad73-7d155aaf6316","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 280451-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '280451-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35af4caa-ba64-532c-af5f-7449f65187a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 280551-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '280551-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7febd431-887b-5712-95a3-752681dd8f30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2811238coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2811238coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da906614-6f1b-50be-ab12-f50ec4a56feb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281284-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281284-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e45ccdb-6a7a-5821-bb6a-bf4849ee1530","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281293b-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281293b-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5ec35-e77d-5514-9a42-3d478d8b2850","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281293coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281293coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ad5e9c-c7bc-532b-b577-6a8ff025fcf5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281402-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281402-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35a0df24-5d2e-58a7-9b1f-575285ad7d49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281403-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281403-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3005dd9f-fcf3-50f2-935e-188d13d22da8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281624-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281624-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e140f53c-3839-58fb-8884-5a85b822d319","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281635-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281635-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfbaa5b-4f4a-5fe1-b6a1-6619e9ac3886","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281833icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281833icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0433b87b-7377-55b5-bd9b-470724d0449a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 281949-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '281949-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d5c384-6a40-5338-a48d-601522cbcfee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 282668coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '282668coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2a3cfe8-88e8-5f2a-84e9-db2bd6bb0742","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2828825-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2828825-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84deab1c-b630-5ab7-a2e1-a2d07e1de1d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 28292929n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28292929n.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83425379-4d8a-5ae5-969e-387008826729","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283020-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283020-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f596cdf-cd4e-577f-a025-906d8c91e445","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283181coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283181coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac96613-7d1e-5854-8def-da5cd2d505a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283194coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283194coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b4d144-cd32-588b-81df-c1de65340b5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283272-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283272-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df58660a-7885-5ac6-a4b2-b2f7d2913460","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283275coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283275coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57539271-5925-50d1-83d6-d11efc90d4e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283458-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283458-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e0c1e93-da89-5860-8cef-cd70a0d28ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283462coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283462coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1889d705-b582-5948-a15d-e8904fbe06f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283579-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283579-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b17527-7124-5527-95c8-7f3cda952820","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283710-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283710-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa69127-9773-50c8-8a82-63ac36dce26f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa7375d-41aa-5f2e-85ec-d3efe1fb0792","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2837411coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2837411coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d545e7-75a2-54bc-ae10-f2c11d12848c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a452ca92-d42c-5b64-b0ed-5409f005d17c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283763-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283763-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439fdab3-6eb2-5e17-92cb-731e45f78ba6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283837-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283837-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638a11e8-0ad2-5f1e-8c13-62758adae1cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283901us-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283901us-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87693c57-2dd2-599c-b7a0-55e6feece1be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 283907kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '283907kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91fdf68b-f910-542f-8634-aaf0f2437899","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284003coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284003coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8715c51d-1159-57db-be43-91c60fd4f884","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284109us-coinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284109us-coinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7988db97-bd62-5186-980b-0dc15cd28326","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284109us-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284109us-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36a46fdc-4491-57e8-b626-4227cf39681b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284193-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284193-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b0469d-89af-5f2c-86c7-108f495eae59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284739-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284739-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751a23b1-3793-5ce2-8b2a-dd3f4fa82832","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284793coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284793coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03672c3c-d81b-5492-8f94-a1665fbcaa69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63bcd2aa-cc91-5684-b91d-c60ecee28073","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2849187coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2849187coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c294c8-67ae-5e3c-9fd3-ff4e18206358","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 284923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1a8d01-6b98-51f7-aa16-ac8201c3f051","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285089-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285089-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ecd658f-33e0-5759-8767-571c3783df9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285403-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285403-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baaf04f-4d48-5b25-96da-778b7c17f9fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285703-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285703-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8bd5b28-171c-56fa-877a-9c012738d63e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285709-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285709-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ec3e3d-61ce-5240-8e2d-bc12a82bfff4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285716coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285716coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171bcc85-b820-51a0-9927-093778f33859","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285742coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285742coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6911934-0766-5d37-9ecb-09a6f1c91cc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285782-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285782-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc3f299-c37a-5eba-96b2-aa2369f0470e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 285785-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '285785-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f8f0a69-78a6-5287-87fd-471bb86d29f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 286857-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '286857-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f09d42-8b99-559f-811b-18abcc972560","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 287121coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '287121coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf47ce7-df1d-52bb-8b3c-91c7b25113c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 28716-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28716-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaad9de-6356-5302-b407-9145c6467760","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 287631-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '287631-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4a7756-7dd0-5da2-aafd-5c187c5af2af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 287712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '287712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc2808c-1ae9-5b9a-a62f-42f880a1e431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 287822-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '287822-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--116d07a5-fffc-51c7-a080-42d9893d4794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2884925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2884925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c241b754-31dc-56aa-a24e-52a4d7c28b61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289153-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289153-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4c203b-3d4c-5019-8b04-4f464fb9b35c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289211-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289211-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016851e2-bc66-5715-acc2-ba387ae9433d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289213coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289213coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449110ce-ce3a-5566-8e20-04e8254f5bea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289294-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289294-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631a5e3d-c410-52e7-a9be-a28e73d8a03e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289302-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289302-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4662928-bcea-5cfb-bd29-cc66239ea127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2893331coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2893331coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b0a9b5-fe90-5b40-81d1-1416f7293a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 28973-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28973-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725be8ee-22e5-53c0-a64e-4e9856a726c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 28983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc467d3-c7f8-51c0-a92d-41ab9faea3e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 289964-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289964-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c53f1d7-615d-5a7e-b67b-65faefd02228","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 28e3ff3283d552a11522e16a24f75eb4.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28e3ff3283d552a11522e16a24f75eb4.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17baa391-6ba4-5dd2-906e-6ea51cf5e735","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 290242-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '290242-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6990c294-7725-594c-b373-b005e7c62de9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 290321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '290321-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340378ef-02dd-5128-a7f3-a462eb36deb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29045-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29045-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8422d076-37d4-5156-b782-076cc231f44d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 290939-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '290939-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4e75f7-f2f2-52fc-8e4e-66b2243a10d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 291385-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '291385-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97a64a3-fb84-5406-98b0-324b4ef0aca5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 291428-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '291428-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--987cc90c-1289-5e11-9abd-1a32d9775d45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2918283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2918283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d36d16-1db9-5074-a68e-74c9faa70e65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29193912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29193912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ad1216-4881-5fb9-80dc-dcc0f49a678f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293094-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293094-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff2bef2-18b3-5158-93b0-82074a5affdc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29315091-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29315091-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9409b89d-6d37-58fb-8029-7566ceed3ce3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29986979-9351-5cd2-bcf6-5c821fce54fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293784-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293784-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54275624-d2a8-5420-bbd6-97ff7d65b428","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293785-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293785-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff040286-1c00-5638-a009-3869b5cef853","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293829coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293829coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fae48c-fa84-5fa9-b2dd-1ea1e170accf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293857-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293857-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d41bad-f91f-544c-9a4f-6f6920352f87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293872-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293872-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c94057fd-68c9-5ed2-a08e-060caed95b85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293874-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293874-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64db2e4f-5b48-5a59-aed8-d8ce77128b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 293876-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '293876-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894e8b11-eab3-53c1-b6dc-788e52b63e03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29388-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29388-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96429a34-9e50-576a-87f8-c9bfd76a8150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2939583-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2939583-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24699fe-cc8a-5160-8437-9cb4b3898561","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2940-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542083ba-a3c5-5408-b450-74718f2a7cb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294115coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294115coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e59ff25-f803-5ae3-8146-428ee0aa18ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294116coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294116coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2576c74-a5a3-5c46-97d4-ebb0558d6751","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294117-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294117-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3ecbd7-9314-511b-8d47-d9e7df8a879c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294117-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294117-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810995c5-7e56-57ce-849b-c1ce1fc2c048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294117coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294117coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5833a63d-95b4-5055-916f-9a3abad8939a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294118coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294118coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e690b3-f21c-535d-97b0-698b8a8df646","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294119google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294119google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b537e1-c099-5c65-a945-53831d6f39e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294121coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294121coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f16bcf-1b7d-57ad-af26-b458d7eca1a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294178coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294178coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b452102b-7781-561e-b28e-f40543462e55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e4ad4a-5dfc-5b44-9b8c-f1aeca95dcda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294198-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294198-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2597f6e1-e082-56f8-a1c6-68e1295fd404","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294198coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294198coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df1622b-c0cb-5ed2-ac50-7dc0033da6e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29424-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29424-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d251affb-31e1-518e-968e-ffb4619d34bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29429-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29429-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49c05a5-389f-5524-8ea7-15a06748878e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294408coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294408coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8911cc8d-5f24-5a63-a2a4-aeebad24e406","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294409coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294409coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da89224c-10fa-5866-80fa-de2f9d9a2571","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294572-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294572-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc23cc2-c242-5c6c-8366-6c8bb4ab2258","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294582coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294582coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a1a21b-2a04-59b6-b405-0a51a841c689","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294798coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294798coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5bb147-fda0-5d4e-8d08-d0214b550be8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294873-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294873-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--277b4f9f-f681-5b9d-a504-0827be6bdafd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 294953-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294953-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebcff577-8470-599c-a6f7-2bad5d6a9a5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 295020-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '295020-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5045fe3-406b-5da2-8bdc-1a6a3adc8af1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 295183coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '295183coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deef478c-5def-519e-906b-210da29e0440","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 295256-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '295256-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a7d305-caa2-581c-9b29-3ae5aca4105f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 296352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '296352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9e83d5-d262-59e7-b6c8-5f5c55820d36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29681-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29681-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d2c240-be08-5a70-a587-4490737be2d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 297421coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '297421coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d93640d-5df4-538e-944b-afcfa6a7062a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 29753-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29753-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c613c18-7687-53fb-9a6c-5d87edd560ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 298101coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '298101coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--898d1c52-cbd0-5ea5-a139-b4186370aa4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 298193-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '298193-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19acca1c-177b-5d74-94c9-1e11323346ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 298272-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '298272-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0383686b-6a91-53cb-9674-b6899c53a45f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 298742coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '298742coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e37110c-ab9e-5df3-8b1f-81abc6f60630","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 299153-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '299153-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f732219a-e98e-5ef7-b6fc-54788b936f20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2999lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2999lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf1b05d-4926-5cea-a58a-51835880afcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2aa03dfcd0568835e9d7d1860c75739a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2aa03dfcd0568835e9d7d1860c75739a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a5a457-45c9-5b08-b4ca-a71f77824423","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2b631575fb9440cd4fa6c2316f19913f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2b631575fb9440cd4fa6c2316f19913f.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--662d68c1-75dc-5e59-9c7b-c77560c65fec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2based.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2based.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f14188-bf82-58ac-b9a0-72fbe19e772d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2bkks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bkks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82876b4b-80e3-587b-9b03-162d40eef98e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2captchaverification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2captchaverification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6cc819-394f-53f7-9058-eb8f886d3ca7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2casebattle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2casebattle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbacca02-ddc8-5b57-98ab-839aa2099976","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2counter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2counter.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa4d4cd-186d-5170-873c-a0a1e67f9711","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2fa-bns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-bns.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af79de1-32d5-5b4f-9200-34608010c6f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2fa-cp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-cp.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3848433-cbcf-5d9c-95a4-1b4932c73041","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2fa-css.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-css.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c097371-1789-5e7d-910d-3a67ec9d2849","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2fa-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03c9a56-0e18-574b-b0d7-b43c0e246029","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2fa-login.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-login.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1e0c72-cbbc-5b68-a4ea-3dc9e922d143","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2faenrollbmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faenrollbmo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14d82f5-9f72-579c-8094-931de884776f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2faenrollcibc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faenrollcibc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f985996b-9223-50fb-b10d-2a045d9a39f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2faenrollrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faenrollrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a358b4-ba6e-525c-93a4-afb80f60e47b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2faroyalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faroyalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fa5a34-e9bd-5dbf-ad11-e9cc975fd863","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2flixtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2flixtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40db16ba-edda-58d3-bff0-0a5cdecb95a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2kmoviehdtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kmoviehdtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca3d844-1d17-58fa-bf2e-23a920338d37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2kn.cool","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kn.cool']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c558500-7b08-5583-96ef-76a3478df7ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2kraken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kraken.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1322566-af45-5518-a47f-8de705761f43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2kraken2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kraken2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--082ab6a9-e12c-5cbd-b17e-c9f05445f1ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2krakendarknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krakendarknet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0746eec5-05bc-5064-9ebf-ddabd74b9f12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2krk.cool","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krk.cool']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a14cb7-30c3-52cb-8a61-b4975867d785","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2krn-xyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn-xyz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff4634f-8dd0-5982-9c83-6e5dd36269be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2mobilescotiaonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2mobilescotiaonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba2d7c0-2806-5499-a569-19f9a1975d07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2moviestv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2moviestv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804db8a6-c5fd-5497-b399-ed9edfaa9063","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2nowtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2nowtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83249edb-aac9-51d7-b4a9-40f6301a5f58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2scotiabankonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2scotiabankonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e06cba-bf5e-56e7-8c3e-66083285bfea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2svbmo.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2svbmo.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34af3710-fb12-5842-a202-f6925012cebc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2v-home.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2v-home.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e4e663-c164-59f2-b6e3-ed6685f5a148","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2vbkb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2vbkb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4db25d8-c654-5c4d-895b-675d71f44ff1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2viafaturaonline.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2viafaturaonline.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a5699d-e037-53ba-8c89-b4a0a42a4102","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ww-umb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--987a0c90-ee86-56ac-bcc9-fee30da164a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2x-mstr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x-mstr.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0eeaee-5a7e-58fd-a213-740442343bb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 2xelon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2xelon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0a0bacf-3e85-563a-90a5-eccc88a779e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3-15-2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-15-2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880b8bc9-a51d-5a78-99e2-10852833b26a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301ef52f-0629-5c67-bd85-35b5b16bda9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30-bet.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30-bet.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe80396b-fbc8-57b1-ab4d-525944293968","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 301845coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '301845coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6891e1de-131c-5738-a431-5ef7e18360b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30198273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30198273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282dccaa-8a60-5446-a436-65c59be70462","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302203.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302203.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae32823-3d59-53c3-8679-26752aa119fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302341-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302341-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b39fd8a-f89a-57be-9bd4-320c98d132dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302419-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302419-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0078e91-a7bc-5d9c-bde1-e022ef7f8d67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c308ca8-5ed6-5864-8bed-21ff9b646de6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302671kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302671kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a20c7fb-ad82-505f-9cd6-4698b1e12939","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302740-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302740-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84217711-f7f6-5a0c-aa6d-2f9e1c53a567","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 302741coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '302741coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--215d6bb9-8f05-5918-b22c-bbd32240491f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30292-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30292-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8f30d9-71d4-5e3c-80b3-16a69a063a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 303923-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '303923-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da7ed74-e346-59dc-9608-0289fda0c6ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 303942coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '303942coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7337e0f0-5b61-5560-b12d-8d85e2ca0130","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 303997coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '303997coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75dec58-5a9d-5a37-9a30-8fcec9505c4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 304781-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '304781-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e85873-d2c6-5d94-b8c6-60b048e1c653","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30486725-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30486725-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdc873c-809a-52f7-b6a2-62337a551da0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 304991coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '304991coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30586b3e-cee0-55e9-ba04-76ad3da178b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 304bet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '304bet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485028ab-56c6-513a-9160-545f19748dbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 305828coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '305828coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff30e3ba-a86f-5dbf-bd96-9bbd8d630ab5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 306002-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306002-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ebc8d1-9e56-55c1-8692-8150d40386be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 306134-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306134-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa8b9e5a-1883-5477-9b0b-ccf73174df06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 306140-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306140-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6246f8-a156-52f5-8d7d-53edc66007df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 306245-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306245-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36f86e53-7d55-5750-97e1-b7408394a08c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 307241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '307241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a6a6bb-2ccd-5977-9bde-623c9d257e4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 307665-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '307665-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cc2268-5a71-5318-ab69-d209f0280453","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 308139-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '308139-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a746dc8-44b9-5095-bcc8-008169e6d0f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 309221-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '309221-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf92621-d94c-5ae2-b66b-5f29f1763908","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30bet-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30bet-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6b6744-9eb0-5cc3-91ea-59840c1e3e71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30bet-eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30bet-eu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669affaf-a86a-503a-8293-766eca3f3b24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30bet.gold","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30bet.gold']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6c8a6d-9cee-5741-8908-5a1693810fe3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30bet.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30bet.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1228d9af-fd61-56ae-8ef2-bb76eacafb4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30betcasino-eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30betcasino-eu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b790e24-233a-5539-93a2-cf491ea97ad2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30c201b9b2ab8966a85bbcf3b7f619d6.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30c201b9b2ab8966a85bbcf3b7f619d6.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07ea23b7-0e68-53cf-876a-ebc87e51a477","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30ed66acd7cc17672d95d81a4e9c5ddb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30ed66acd7cc17672d95d81a4e9c5ddb.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08009522-e955-5f31-9cf9-854501a9f009","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30eth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf6387cf-8ca0-5ac1-9712-b6cd2d5b560e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad4d9e3-e8db-5358-a516-f46499cf5d8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30hsupgrade.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30hsupgrade.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3cef91-7006-5ae9-9fa6-246942199e01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 30m-kucoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30m-kucoin.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ad3ec9-ac0d-591a-acf1-5ac30ecec3a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 310306coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '310306coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36fcc6e-7210-5019-a363-957e5a2fc7c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 310538-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '310538-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a39f97-4a6f-50ce-8adc-0782491393d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 310570-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '310570-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d92b896-1d62-5d87-842f-77618446ccf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 310599-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '310599-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45708de9-d0a4-5414-946b-bf2eb7116bcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3119874coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3119874coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60722cd7-2d32-59b5-a2b8-2d86dd68c16d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 312123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e756fafa-20fe-5389-9c10-e5ddb5a02520","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 312410-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312410-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e54678-eca8-5a58-bceb-aeb7ac446a8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 31251coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31251coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec3989ef-3e7a-5ccc-94c6-b787831febf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 312831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312831coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8492c5-2b34-5e5e-ae5b-ff76ae2d0388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 314459coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '314459coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07a61f4-b45a-5edb-9bc9-f01261394a4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 314994-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '314994-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd94471-e357-5e6d-83ac-40f5d787c9a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 31521-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31521-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdb812e-1da5-5489-b97e-049e443e6166","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 315280-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '315280-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--498dbeba-ceff-53c3-9c98-ccdb40669a03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 315281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '315281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f6ea17-7851-5dc4-8351-06ff06d3e85b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 31580-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31580-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23689533-8351-58b1-a0d8-9b6128e1fe61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 317564-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '317564-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--241d6729-a0e2-5c6c-8db9-b9b45c076946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 318413-coinsquare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '318413-coinsquare.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ce72f3-c0dc-54ee-9a9a-51fc8b52bc26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 318712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '318712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177178a3-02ae-5c87-a4f4-e4cbe4ab7ab0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 318794-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '318794-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbec6712-86bc-58f7-bd5f-f5357fb6912b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 319209-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '319209-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf7dae7-d583-5cfb-bd89-e59102bb1135","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 319283coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '319283coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d7b56f-b16e-51c6-9f22-fecdfbdad67a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 319421coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '319421coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e319d05-a11c-5471-bd55-35b394d614f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 320605coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '320605coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97184dda-563e-5cb9-ae2e-9fd48c018c9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 320606coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '320606coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0eff68-b974-5a1a-ae07-884770b1e713","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 320607coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '320607coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bc8493-bbb4-594f-9906-b7ed1587d6eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 320608coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '320608coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c43052f4-8b75-5e93-a24b-4f681bc63ecc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 320761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '320761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c21786-bc8c-5d3a-9735-d154d0cacf31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 321342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0e8709-e039-5722-a4ad-d024e791f4ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 321352-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321352-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1644148-3703-560d-98d1-1e602d13773c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 321634-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321634-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f24e314-a630-500a-9d20-52068b8a92af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 321890coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321890coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61cb24d-2cbe-5772-9014-b99e673dfcf2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 321moviestv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321moviestv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a74ba3-4979-51d4-9f03-00f11744ef3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 323894-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '323894-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f08997f7-8be4-53cd-a70f-238d8bb6128a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324052-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324052-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d3706f2-bbb5-571c-85ee-8dda5d8075aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3241266-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3241266-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42dbb191-2def-52c6-a274-611c08041bec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324136-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324136-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2abbb8-33a0-586b-bf25-c5ad76eb8dd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324190-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324190-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3656bc-71f8-587e-85b9-47a0d85e9561","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324252-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324252-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbeec66e-44a5-5267-9b95-457d696f4795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324327-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324327-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1332771-b376-548e-a773-c9f35f0f05a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324567coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324567coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edefd4e-8325-5cc9-96ed-9f3c5ca0ad81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324571-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324571-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb95dc4e-9317-52f4-b334-cd96c8627a89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810a1d26-55f6-5e4a-8982-657d181aa01f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324783-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324783-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ad214e-92e4-5b30-8b18-cd4ac6c75bfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9920b1-7b63-5eca-9070-3d007343ab37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3249192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3249192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c96dee3-faa5-5f76-b806-bc77d453ef58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 324966-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324966-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58570a0-3656-541c-8c14-35bfb78ebff9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 325395-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '325395-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1a9ce1-516c-5a81-9cd5-275bc03561b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 325841-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '325841-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b174a-2540-5438-99aa-5e63c4aeb763","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 326905icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '326905icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4024b43-be7d-5b74-8df7-c93b022f1bc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32713-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32713-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75346b1a-d88a-56f0-9d43-5c3b68c43d78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 327485-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '327485-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e49ed8b-a5d4-5aa9-a16c-1253e73eac2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3274coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3274coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbd1078-665c-5f95-9290-84c865fc8764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fc4f20-554c-55fd-a5c1-21fb3d3d5322","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 328187coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328187coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4690eeec-b377-5455-baf1-cc7d60014ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3282843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3282843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15239f97-b836-56f2-98af-628598b3271d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 328596-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328596-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a00bad-5fe7-5091-9ae9-57eecdd6d476","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32867-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32867-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b61763-8d24-59d4-b899-9ac609fc3d11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 328934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebe0b14-708a-5797-9394-7692a7657e72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 328945-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328945-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df10b79d-0d79-5ff5-9f31-0d92b1289324","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 328974-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328974-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daa727c1-95ba-5098-96e1-aadad4518832","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329032-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329032-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b55b6c1-735b-5178-b262-6fb2f51a612d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329052-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329052-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c179391d-1254-54b7-930d-ee90024f92bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329302coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329302coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c81af96c-8092-5a4c-bb15-379744136d71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3294352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3294352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d129ca-87c7-5a54-adc6-8e86f14f3406","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329492coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329492coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdeb4cbe-6d3a-56e9-9e47-9b5e54cd6ca2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329557-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329557-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--661621d5-04fd-52fb-b150-e12e7ed73f10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 329851.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '329851.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3ec063-6cc9-53be-9fb1-8ee6b40c7c59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32992913-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32992913-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35aa8ce5-9fa6-55a3-9c4d-b2e771ec29c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32bd3685fcd6451262e2134e15a75d5d.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32bd3685fcd6451262e2134e15a75d5d.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aa2337-6464-5279-93ea-5c71c6739629","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32kraken.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32kraken.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5395234b-9fbd-519e-83da-7cdd412c8438","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 32tfvrs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32tfvrs.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1b885ab-5e78-5f6c-902f-309691fe5f52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 33-spincasino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33-spincasino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8423dc5-a352-5354-8d1a-c23583e2baf9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 332461google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '332461google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f10d101-49e8-54f2-a8cd-dd3af4f60130","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 333035-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333035-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bbffe33-3947-5a10-9855-148a1b3369af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 333243-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333243-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2002a41-e705-5b65-9570-59017cdeb079","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 333casinoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333casinoo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e373ea00-f50d-5e12-b487-4b8a4b6653eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 333pills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333pills.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd05d282-8e6d-5ea8-ad3e-29d710e1e6e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 334093-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '334093-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcba55b8-e4f7-50e4-87b2-1c6f0ce173a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 334154-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '334154-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88943fa-7789-5c8c-81a1-eaa59c26cc8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 335295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '335295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056807f0-68d0-5390-9048-f1efbcec026a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3358d7208c87716d41bf36a63b32e6ef.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3358d7208c87716d41bf36a63b32e6ef.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a3db49-ba90-58f1-9868-a3468c342c0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 336470-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '336470-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f926a7b-b27f-5db8-adf9-45f78646f8c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 336482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '336482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6283dcbd-a9ac-528e-894e-1ee19086acb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3373fe5f6c080421b9ff772f80a2775a.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3373fe5f6c080421b9ff772f80a2775a.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f46ce7-e0c1-55a8-a18e-db6fa0db9f87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 337829coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '337829coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--018ccdc2-0e25-585f-be48-f3d0e86776ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 338154coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '338154coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9753c86b-b694-502d-a63e-051ba4fa9e7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 338582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '338582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b2c5bf-1911-5ffb-8ec0-efa57bb45feb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 339945-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '339945-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85a8b3a1-49f1-588f-8166-8dc07eb5bb97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 33el.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33el.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e079b6-0213-5fd8-b11c-0d1a5405e375","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 33pills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33pills.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db56f8ac-f713-5da3-bb8d-fb0e9b549e09","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 33xp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33xp.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21aa354-b795-5509-ad9f-693c47b56639","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 340590coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '340590coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b5c9bc-985c-51fd-b1ff-d973f4671253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 340940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '340940-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3093c0-82d4-56e3-a65e-54da0dafbbb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3410055-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3410055-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aeb603a-b0a7-50cb-98c1-91a68921f85c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 34124-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34124-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fb62b1-d615-5340-b4a7-bea7fe993a31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 341267coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341267coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acaa1e8f-89ab-5683-a5e5-09c88e0cde64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 341369coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341369coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6be6e292-857a-59cf-b7a3-2362de8e3278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 341731coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341731coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb9a414-afb7-5328-96ff-07ef55dece7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 341817coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341817coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae613c3c-7c27-53f0-a5aa-4f796d389e0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 341839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '341839-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499a23a9-3a2f-5938-9da8-76962a32b50e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 342073-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342073-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff90470-bb8a-582d-917a-8b412ebdc45d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 342563-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342563-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0b28ac-a942-5ca8-b829-3fcf64c2152c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 342716-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342716-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--929c2f45-6561-5602-8ac4-02c0c2186054","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 343243-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '343243-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0ad23f-1554-58e5-ba18-6735bb582a85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 343818-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '343818-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7ba425-a69c-5a9c-aa7a-373dee88bd05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3445saintclairshoresblvd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3445saintclairshoresblvd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--247dd0e9-2622-500b-a0bc-c210321ac087","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 344947coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '344947coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6937600e-3892-5017-9c38-eb94b8269645","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345190-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345190-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd488ba3-e18e-55a6-b764-24e1a0bd900a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 34535-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34535-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f721cc24-cec6-54f2-9a00-7f133d29a03d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345678-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345678-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e890ef5-5c3d-5ed2-a5dc-6c5902236e76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345698-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345698-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bfcca45-55d6-50a0-a160-ecef97ad9639","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe895b87-9f37-5c2c-9b0c-f1230c122832","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345934coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345934coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38bdbbe6-8234-5c07-bddc-52ee231d82f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345961-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345961-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a80e8f-f170-55d4-b13a-5be186f64178","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345978-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345978-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d72f85e-7a84-5de9-ad52-7524f99b52a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9495dea9-907b-5a84-ae23-2aba433f9b9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 345movietv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345movietv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12e0978-a7b3-5182-8941-82605c0dcba4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 346048-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '346048-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2103e15d-9f0e-583f-9663-7ef16395bc9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 346098-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '346098-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a59e7532-eecd-5312-99dd-6c7ca5cac523","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 346812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '346812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd39dd6c-ad45-5700-a7ed-bfc692af3286","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 346859-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '346859-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a1eaa5a-70b7-52c2-8223-9601c5af826c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 347372-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '347372-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea2c5b4-87ce-5424-831d-f656b7222c1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 347686-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '347686-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa76401d-6cf8-5d06-afa6-bee3d44568e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 347891-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '347891-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cff3be-f2f4-5719-aae3-709239b1c471","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 34812-barclays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34812-barclays.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1262ca45-1e32-5cb7-8cde-f75bd8a060ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 348376-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348376-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d15259ac-051b-58ea-9681-8a10971ace24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 348672-shakepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348672-shakepay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c065ccea-c8c5-5304-830b-513bb11a6f9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 348907-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348907-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3c92a0-cd11-5a88-a952-2f3077cf27e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 348953coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348953coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54070549-4cca-524f-a4c3-92d49f8b29cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 348yedibahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '348yedibahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793496cf-0959-5f93-a962-fd40ed2e94fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 349023coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '349023coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee318fd2-10f2-5550-8128-66644f9e6488","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 349821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '349821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595ee6d5-5c5c-5cb9-9be0-2be2d5228cf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 349835coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '349835coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66f15914-4c5b-5af2-ae66-ad6b560fa5fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 34985-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34985-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e817ef3-967e-59a6-b2be-a8bbb4615eb4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 350291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '350291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035b4f37-d79d-5595-a9f5-bf1f02a1986f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 350519-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '350519-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f576fd-f608-530b-b23d-62e924fcd830","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 35126coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35126coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc5403d-061c-53df-a096-9f1d75f68d97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 351672-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '351672-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1935c352-f101-5f24-be15-9f9edbb50219","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 351728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '351728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b6b6c5-6d5d-5011-8153-90cbd9000291","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 352146-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '352146-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c1790a-f3b5-51d5-97ad-0228dc18b0fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 352861coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '352861coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16c879e9-ed12-5256-88a6-a03249325be0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 353614-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '353614-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24ea384-e34d-598f-934f-954b341dac10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 353827-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '353827-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccfa0e05-66ff-56ff-b1a6-b8a6845f92cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 354731-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '354731-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f183a2c1-8b51-51fe-906a-661f6ffe9dd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 354978-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '354978-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd75888-a658-5c93-97eb-fefbb3b79d77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 354981t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '354981t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62db94c7-1724-5c5a-ad4a-1daece7244f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 354primebahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '354primebahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea740019-e8ae-5196-b19c-82fed87657ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 355cf0766d6db92c63a8c72768760b0b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '355cf0766d6db92c63a8c72768760b0b.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bcbf404-e194-50ff-8212-6c9059112edf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 356015-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '356015-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c816aec-ecf1-5933-924c-cbb8aea29abf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 357832coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '357832coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3652155-1a6c-5277-9e52-2c961a0b9966","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 35800-chaseacceweb-auth.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35800-chaseacceweb-auth.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c26435-9629-5142-a5e0-076f672c96f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 358129-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '358129-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f731667a-00f1-50e1-ac82-46f1c42e6530","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 358244-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '358244-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--968ade61-cd6e-5edc-84dd-70ff0e30f226","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 358438-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '358438-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506049b0-2d2a-5875-b97f-b9c1ad516987","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 358902-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '358902-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d97219-b57e-50dd-8ad0-66112a3eb356","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 358952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '358952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb27f57-e879-5a6c-ad38-64fe6d8c1178","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 359183-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '359183-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466bc1f7-a9d1-5b1d-9f6b-86445c3892e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3593602-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3593602-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364c2ee4-4b46-540a-a6fa-14a39f4e607a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 360tradeco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360tradeco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4991b897-6d59-56e8-b2ed-931d14e169b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 360vergelijk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360vergelijk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f0b908-6a73-52ba-acb1-0fc693fc6e58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 360via.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360via.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d328cf44-5e3c-5c42-87e1-c0bf270d96cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 361182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '361182coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f79166a-76f6-51a2-91c9-7b8efae3b864","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 361730-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '361730-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c40755b-f185-5180-a471-2e7004e616b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 362641-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '362641-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a9c0e4-2989-5d8e-b461-41b0b76f83e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3649585-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3649585-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a2a73b-9041-5467-a912-be4f4b95de5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365-microsoft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365-microsoft.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf3d144-d676-5693-a97c-81ade1ca4ec4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 36501.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36501.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8c9178-4bd3-5e19-bd4e-1eb6ef535ac6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c7be43-8763-534a-83aa-d82979b84b14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3659586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3659586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e237c18-0ab2-5d21-8746-c1a5add152c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365drive.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365drive.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22530d33-1308-5697-90ac-0128b4ffad25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365microsoft-logon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365microsoft-logon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1139e58-b457-5fa2-9b12-7bb5f7da5ae8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365onlinepharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365onlinepharmacy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd27922-635d-5dc4-9a44-f0a3c8e17ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 365rx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365rx.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0193bc03-da68-5778-9fe6-e6eb3997543f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 367456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '367456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3102771c-3b34-50e9-854f-757acad0fbb5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 368141-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '368141-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481c5c33-1113-5a94-a122-43f1b6b28c7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3681606-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3681606-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--067bb18e-c351-5f64-8cab-87b9f802c431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 369087-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '369087-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f751d1-5358-5c20-8743-a4c68dd25dec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 36918-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36918-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e48074b-d7e1-5cdd-80c5-2d38783b1610","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 369823coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '369823coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6055ea96-25bd-5190-aa21-de980f1211a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 370315-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '370315-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52d041a4-6508-584b-aa9c-d3487e49ed2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 371292coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371292coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76da0737-6067-569f-8883-798cd9cf93b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 371859-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371859-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd81558-e214-5f21-836f-12091cddfa16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 371891t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '371891t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bed6b3ad-af9c-5e78-a508-8452cb1be094","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 372426robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '372426robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7870cb6f-b8ae-5c54-ac75-863c49b348f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 372469-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '372469-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8e097b7-65d1-5151-bfb8-0a12e6a452f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 372564-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '372564-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14cc53a4-9db5-5de4-8c7b-26770909f6ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 373041-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '373041-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--149d1512-60e3-517c-a8c1-1aab4c5f8720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 374281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '374281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56f5ddc-6206-5346-8d10-b3e935cb86ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 374286coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '374286coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--116160f9-ef04-5fe7-a8af-202b3f9f5788","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 374489-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '374489-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32e16efb-7a08-5624-8bd4-f40da35fee3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 375384-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '375384-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00407733-12be-50cf-95b6-ab6fafa49149","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 375832robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '375832robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--962c2493-53d2-5641-8518-73a6f017e375","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 37583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4846c3ab-d393-523f-ad82-00c7fc87b0c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 375872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '375872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa04d66-1a44-55f5-9dc0-3ddd5732bde6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 376751-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '376751-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53179228-5aa7-58b3-baad-a6912aa48918","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 376992coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '376992coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aed95a5-e3cf-5db4-a95a-8311e3003e0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 37750-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37750-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06f8f3e-4447-5073-bb79-97b00b6a3cba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 377wbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '377wbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4234c3f1-ecae-5171-bfd1-ab6c334da7df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 378219coinbas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '378219coinbas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c86e4d-11ed-50fd-90d4-9afa11487c9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 378406-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '378406-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--059f75ce-38f3-5ffc-bb0d-4184064dded3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 378456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '378456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b9b415-4b35-512a-9254-b4b342283c45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a351bf-8532-5a8e-934b-3bce331106bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 379203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6965c307-eecc-5b1c-b562-ec1741a92e70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 379543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318614a7-e790-51bb-a7ba-602e61cbf829","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 379813-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379813-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d907072a-8fd5-56b2-a5ba-81fd8495fccf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 379856-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379856-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab291bc9-411e-5230-bdfd-6599ec827edf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 380405-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '380405-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e942b41-974b-5d00-a8b1-7cb9f66d99f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 381005binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '381005binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb084d5-1d3a-51dd-8b18-2762d550168f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38109219coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38109219coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925d9362-4e0a-54f7-8a64-ee5655669a41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 381952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '381952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dfe51c-b564-5717-b9a6-cab3b1bd48d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 381casivera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '381casivera.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9b33ee-aaec-58eb-ae72-8b202c410daf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382032-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382032-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b041ecb6-81fb-535f-a80f-1e0157bf0a60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382045-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382045-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--913e3741-9ee4-5616-8250-8b705850689c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382130-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382130-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4853d9f-d0c6-5e04-bbe2-cee109304b8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3821p8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3821p8.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8f7ed3-21ec-59ac-b892-2de2545ae1ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3822937-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3822937-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4f0b081-6f4d-52fe-a000-c0bfe08a14d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382403-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382403-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c20e3401-8d02-5cab-9409-ba51e95d3e30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382503-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382503-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e81ebc2f-232c-571b-8136-19420decd99d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382503coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382503coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c90d9e2-cf96-5ae5-a376-8e23cc4b94b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382741-coinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382741-coinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0dfb16a-613f-5643-bf77-e5db3e6f0bf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382741us-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382741us-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4839b29e-b29e-54f7-b131-9ef58cd8105e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382777coinbase.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382777coinbase.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ee5836-55f1-50d1-8fb5-d8cce092bd5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382783-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382783-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c40df1d-7462-558d-a78b-8a1ab439f5eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382964-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382964-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4fffa0b-ab25-5861-a53e-216feddc62bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 382975coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '382975coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de18b78b-a7b0-5717-ba74-d2681cc585a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 383241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '383241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2327037-487e-5195-afc1-8d55817401af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 383338-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '383338-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7714c1-9f4e-5bc0-a6d7-a7652c20ad33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 383929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '383929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e04b0151-7a65-5340-adb7-ed410a8d4596","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3842382coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3842382coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdf53c1-1936-52e4-b693-52450e58ea5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384374coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384374coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e298f3-44d2-5b0c-80da-a191d4cc032f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384515.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384515.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--228a8635-6465-5a29-9a8f-b013e0b04637","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e04c6f-5bea-541f-9269-75eed13784a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384652coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384652coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f1a14e-acb7-5694-a863-ac5f4028b568","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6db94c11-3a60-5a6a-953e-cd7a76b3b561","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384816.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384816.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c65e3c8-1f9f-5861-a7dc-7cb17fda1b1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 384910coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '384910coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34b04d6-19bf-52c0-ae2f-40b8c288d0f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 385513-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385513-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712d61f6-0b7b-5c14-b90c-dce3e76a7cd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 385723coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385723coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b625dd9d-5dd1-5391-84ea-1d04e7c61655","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 385855coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385855coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1a2138-8db4-5311-8142-2bdb4d6d6b4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 385856coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385856coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79084931-7c5c-54c6-a266-094d585c3262","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 385858coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '385858coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791b5f70-60b5-5c57-8d5e-0d055e5bfc4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 386412coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '386412coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea43676e-3420-5703-ae3d-4820bab8dadd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 386491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '386491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3af04a-e231-5aca-b2e5-86d8bb1cb59b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38652coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38652coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9304c91-00e7-56d5-908b-3f356a3c83ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 386752crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '386752crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06be3488-178c-57c2-84ac-60b586a1de6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 387136-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '387136-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--339d31b2-dddf-53e6-8d87-879a9e189aa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 387375coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '387375coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54371578-bb68-5497-8440-15534930a23a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 387459-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '387459-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de651d3e-8bf6-5785-b2f1-b20e33e73c17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 387512robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '387512robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--044b141b-d3aa-51dd-951b-162e04813462","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 387722-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '387722-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ab1355-4921-5907-9627-b5ceb93806e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38809-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38809-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c04ea17-2c63-5bca-8569-30fc8c8e8afd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 388242coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388242coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d6630e-7c6f-555a-8cdc-4ffd0fa3fd4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 388281-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388281-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--107096de-d21a-5cf1-bfde-6c4d8fc71b64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38888.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38888.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1cca0db-d9d1-545f-8204-e8e67219119b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 389092ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '389092ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4828e10-e34c-52dc-9a14-e82f8d398bc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3892192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3892192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc61ac3-8176-5420-9040-f3951867c867","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38927-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38927-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e12e5e9-6eed-566d-adcc-c3880c63ccfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 389494-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '389494-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b4ec29-4bc4-5832-b427-638a4580e68e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 389657-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '389657-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26339c4d-c672-5f30-ac1e-ed836e909c50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 38983coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38983coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6fdebc1-e9a3-53b3-b2a2-211243612876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 390202-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '390202-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07997cb1-1e28-5176-8c4c-a8e64f174a89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 390213-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '390213-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5680e2c-5b95-5c83-9237-7682e5c34b89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 390527-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '390527-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe664f16-799e-5241-82ae-1e777c5751fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 391215-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391215-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d3d1b-6f62-59dd-af7f-4d7c4a4173dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 391238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12b3c52-9ca9-5c95-91eb-d316d0c706f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 391382-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391382-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da1ea51-7c20-5399-838c-667ace2b710f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3914-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3914-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7c18a7-813b-50dc-9dad-2fb0d75da71b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 391572-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391572-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd63079-9835-5421-845d-73d0f6ff096c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 39192131coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39192131coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0ee518-d118-5b0a-a0b5-642c0f2b7edf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 39192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32c8276-288b-509b-8c0b-7488302903eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392029-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392029-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c187d851-eeba-5c97-b6f1-8ad8ea542cbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392142-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392142-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baa3a5d3-52f0-5f25-bd01-4d87cae7fdfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392420-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392420-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5bce4a-95f4-533d-89eb-b128d81e1d43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 39244-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39244-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92647d5b-1eeb-58a5-b415-ceff24d59831","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3924912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3924912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4822e663-8697-54d9-a6cc-e2aff672c101","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3924912-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3924912-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d60248-f0bf-570f-aacf-8dadb6a45215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85087e84-1d76-5826-bae9-c11cd6e710b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392775-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392775-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--064a941d-f9fb-5c5c-adc4-f2d814c2858e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392832coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392832coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4dfc05-8ccc-5d8e-9a4f-8dda7d6b5a90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392884coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392884coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dad8aa1-b7f2-5f38-9c54-c407b565384e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 39294-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39294-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50b4454f-2235-590d-b2d1-87dea42b708b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 392958-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392958-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2accc241-5810-562f-99c6-b1ab8649424a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 393412-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '393412-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c008ef-266f-58c1-8401-3ba07636d6a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 393980-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '393980-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d232a1c-90ea-5669-83b2-1d7ac8204bd4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 394287coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394287coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a33ddd0-d76b-5d84-902d-9cd58af04b68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 394347-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394347-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d9668d-632c-51c3-bece-829e6919b47f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 394578-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394578-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f336b30e-1192-5b9d-a5a3-cb2c1f268c8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 394675-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394675-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a1bea9-aac9-50c0-931c-dc723002b592","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 395022-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '395022-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6322d0-26d3-537c-a188-99936bfe73d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 395821-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '395821-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f804317-9ab3-5833-ae64-a0770e0b390a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 395929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '395929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35703aa1-d442-59e3-bc49-d4a290962582","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 397512coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '397512coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb8aaac5-2b70-52ae-9d59-9961ff7d51a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 397523binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '397523binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0464af1-0664-5cfa-b45b-bded12be1c0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 397928-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '397928-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0d72ca0-1078-57db-92a6-fdaef34a6e34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 397casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '397casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ddc371-d55e-5a10-ad98-b2d21b23f14f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 39810-coinbase-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39810-coinbase-secure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55ab5944-072d-5a77-95bb-5001b98d3c57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398182-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398182-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77e5ee5-3af1-513d-8b88-3a32bf37cf1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398245-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398245-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3c87b1-f70e-5bb2-8bca-6e6fdea0978e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398276coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398276coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80356fc0-baba-5c1c-86b3-a7822d4c9750","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398478-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398478-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41d5485-3db7-5cf2-b1d5-15a1cc238443","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398498coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398498coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1ab5b6-c4ef-5bbd-bd1e-b510fd0dda13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398745-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398745-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3c1212-25f5-5f37-8f69-b73d761961a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398925coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398925coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b5d3e0-f382-5fe1-8101-fd0be155cf4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 398940coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398940coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9946c941-25ad-5ed6-b88d-1fd08ab23516","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3995205-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3995205-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d3ee6a-aca8-59e5-bea3-ff85f6e9f380","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3btractorequipment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3btractorequipment.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96239450-fa51-5cef-9b01-9379d4bad0bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3centrelabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3centrelabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd4311e-879d-569a-998b-83121c1e17e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3dayprofits.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dayprofits.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5647dbf7-8b05-520c-81c8-5abff80f419d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3dcd99tefsfu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dcd99tefsfu.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25eea1d9-6e17-519c-974e-95b305907eaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3eee5838c1c55d97f94e3fa21223674f.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3eee5838c1c55d97f94e3fa21223674f.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7e54f2-23c1-59f3-b74a-867f034f3ffe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3ex-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ex-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a9260b-e4c4-5f14-8712-69e37f970e57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3gdmv8npo3j.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3gdmv8npo3j.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f935f780-8d19-57d2-ba8f-b6529c98e740","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3h39t2coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3h39t2coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b351ee-4c34-5ca5-aee1-94cdd6aefc2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3h83k26-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3h83k26-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b905e08b-623a-59bc-8a4b-4d3dbb74cd04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3jane.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3jane.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd662df-b080-541e-a2b0-ad88d75054d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3jane.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3jane.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--296c9fe6-3719-59d2-a564-d6d7a3429bfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3m420.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3m420.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fefc12f-1cd5-5f4c-be6d-e63d83b865dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3mir.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mir.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7cce22-2089-5a60-bce1-c96a357863c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3mlr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mlr.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee89f81-889c-5a00-ae40-4981e82f392b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3mobile-details.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mobile-details.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d036e0-7e63-5e8a-8d18-6ecf723db431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3ph2e7r70r.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ph2e7r70r.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3249e355-6e3f-58a7-9b0b-ebcf1343a6ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3rh2iurhiuwhtwh287ht87ewrhwuerhewiuthewtewt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rh2iurhiuwhtwh287ht87ewrhwuerhewiuthewtewt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36ecb12-d05d-5a0a-81ad-406fd6285cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3royalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3royalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4634e478-0bd0-5882-a5e5-d9a981c729b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3rxcm9ytt7z.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rxcm9ytt7z.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e43dc68e-1d08-5f80-a287-790bbafcb69e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3threemobileservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3threemobileservices.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--694a5d37-bdeb-50c6-9e8b-3d4f9f54be93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 3ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ww-umb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0d5366-0df0-5784-97a9-882ce36fa8d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4001coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4001coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb13df63-71ef-540f-8dd2-6cee3245adf9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4002-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4002-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2e4164-fa89-5dc0-a3cf-e64bd2c5cc2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40192.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40192.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd0f615-a876-561a-a30c-88d706cc3abd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 401konsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401konsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6468b5b-47dd-5a73-9099-2d7252bc41f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 401konsolana.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401konsolana.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a937f2bb-6b27-5cf9-a4e1-9b45a0c9cb91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 401ksolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401ksolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a684571-e4bf-5e5b-af79-24e22d7ccb46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 401ksolana.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401ksolana.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d86afc-41a8-5b3d-8299-4d162ba12aa5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 402104-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '402104-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3263d94-662f-51e0-b524-576f1c141601","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40238912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40238912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07364f4-3484-593c-8d60-87af3f48107e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 402487coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '402487coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--385b82d0-77e5-5ceb-a5fe-ed63c26e414e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40281google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40281google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--877e2531-e60e-53d6-8069-f89426c04a9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40285-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40285-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--880cb238-6937-5ff9-8563-00fb12d0a957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40291.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40291.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd103a8e-5cef-55d2-bef8-6f895f581163","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 403901coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '403901coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d76982e-e4c1-5cea-9d41-8abdc7d18b23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 405845-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '405845-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a04a4b-26d9-5021-b2ad-5c905dd9d611","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 405922google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '405922google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bdd735f-5a5e-5073-9bd5-1c8fa843918d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 406718-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '406718-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f7866e-457f-5e05-bc54-487910b7b00e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4071marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4071marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feba2cd3-6dbe-51ca-a39a-eceb000cbc87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4072marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4072marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18aa4045-7edd-53b6-8855-a6a9f327c114","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4073marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4073marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4ac2c23-4070-5dac-a4f9-f47a59deb521","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 407etr-tollpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '407etr-tollpay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d205bf7-7082-5e8b-a0a7-6b125ababdbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 408127-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '408127-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a87cbcf-0143-5406-a46e-4a0f2d1b0ffb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 409741coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '409741coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7d1a70-d08b-5f3e-87cc-bb892cf35a68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 409871coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '409871coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cadda0d-39ce-59f0-b159-0b85b23d067c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 40eth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40eth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe62890-286f-57c5-b08b-57cc4c5ea9d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 41028-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41028-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95ce2ae-c8b1-575a-a875-fbb7bd4f50f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 410488coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '410488coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42881a48-16bb-54f3-bedc-7aab745f6e7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 410linterac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '410linterac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dbcabea-a593-5476-92ff-ece6037b62a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 41163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f11d21-e7e9-5901-83f0-69e91c7be048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 411852coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '411852coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e1ac28-3425-5d3d-a138-e818b59936ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412029-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412029-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d46f0c-aea9-5898-95c4-dd9b7fee6a23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bd00b2-5724-55a4-81eb-ad9be86b6850","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412548coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412548coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07370b3-3179-5d08-8e9b-85ba61ae3465","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412618coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412618coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5f1b322-0705-5d7b-a2b3-8fb26e84e2bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412730-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412730-coinbaseportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a132a8-76e3-5a67-beed-f162b5fed1e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412732-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412732-coinbaseportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a28da4e-95ea-5b27-b64f-a47f027d82a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412739-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412739-coinbaseportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1991e4f-5e03-5d7a-81a6-2ea1d643b4d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 412890-coinbasehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '412890-coinbasehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--425f692f-250c-5fee-b672-263b16158d46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 413141-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '413141-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd2d36a-92d9-5565-8590-d4a0f8f06768","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4132coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4132coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29565329-a85b-5bf0-93f6-3377b56cee14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 413445-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '413445-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cde641-342b-5c2d-ac52-2f7bd9379b08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 413963-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '413963-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--961b3e02-cd5e-59ef-8185-2e374f810310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 414141-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '414141-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d04e07-900a-5aa8-97fb-1b3c90debeea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 414393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '414393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ebffa3-a542-5a13-87d3-113936ba8ae2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 414732coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '414732coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22739375-7d96-565f-9fe2-6e506163c356","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 414ea8329b8925b839b521db8487a532.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '414ea8329b8925b839b521db8487a532.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a39f378-638d-5ab1-a275-519ea7bc53af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 416267-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '416267-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb21b4b-ac9b-5861-9e95-7297ed479027","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 416583coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '416583coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76e92b3d-9916-5e89-bfd1-d71330bc6d36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 416721coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '416721coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2f16a3-2392-5a2e-871b-67106cdd0cbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 417339-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '417339-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13a9c13-fbb6-5ca1-a0a0-75bcbec1f1a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 418112-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '418112-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea5cf3f-8dfa-5088-92d4-8bf3425a1617","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 418591-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '418591-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845b4210-ca8b-56ff-b7e0-4fcb1dbf4545","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 419203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '419203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60bdab14-74cb-5560-b886-b1284cafae51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 419227-discover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '419227-discover.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74bc60fc-a474-5949-82d9-dba836aea0fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 419528-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '419528-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb48de6-915d-5242-a87c-728de4c7973e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 41953-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41953-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cef3807-eea7-55b0-b488-f63bd848b063","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4204beturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4204beturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d6e0ed4-d455-5731-8cf6-a70d1882cfdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4205betturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4205betturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0267c1-d058-58e8-b4b5-5e69c0ce61ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4210betturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4210betturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f2454b-4503-5792-9ba4-cbcad7e05c8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4211betturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4211betturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4553164f-a58b-5390-9458-c80ffeb6153a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 421424-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '421424-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--273c508c-1fc2-519d-9754-1c0021f88953","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 42144-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42144-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4b5ad8-d106-572e-8640-b54b57662dff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 421598-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '421598-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44435120-9ac3-5671-9969-7d33a9133312","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4236346-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4236346-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c5f9c3-68be-524e-9440-eed2ff6ea3b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 424311-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '424311-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542a6299-e5a2-5a7c-9745-dea297aa146d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 424780-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '424780-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d1447a-b7bb-50b9-bd04-9896943a3191","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 424781-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '424781-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de77636-83ea-5cab-89ae-6d34e6fc3c8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 424910-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '424910-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--645f4ab3-c922-519b-bd59-f89af77a7c05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 42498-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42498-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93026fdc-3e0d-5d65-ab01-a5df43523c16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 426053robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '426053robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77561930-79d0-5eb9-891b-827d413685db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 426084-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '426084-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921a004e-d0a5-51db-a017-5cbf20ba0df6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 426825coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '426825coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7c5346-266c-5bde-b143-38dca38eaa2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 427124-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '427124-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e12ace-17b6-5637-a9d9-e1ff4854fa54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4275619-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4275619-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecccab38-a5a8-5331-bd2c-a10fe40233c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428107-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428107-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1234986a-6774-535d-8b64-bb7f2c15ff22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428698coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428698coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce341896-1ba8-531b-b450-b8f752459332","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428738coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428738coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--548c738c-690c-5f06-a5bd-340e41f332a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428768coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428768coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49548414-32c6-5f86-8df2-3af020afa52b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428888coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428888coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5ce220-ab61-5735-baf8-7b86ce210286","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4289-capitalone-member-auth.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4289-capitalone-member-auth.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7ee2f6-eccf-5e75-8435-27e4b38b2086","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428942-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428942-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c43f8c2-b2da-52a0-b9e5-b36638e02691","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428988coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428988coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71887e22-67ae-5543-a310-0fff454b42fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 428998coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '428998coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2a912b-0364-5c9a-b1e5-e516ffb52ce0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429042-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429042-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee2ff84-f5d5-5404-93a8-d44c0b09b224","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4290533-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4290533-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8672f0-6b74-59cf-9e62-e32c18529ada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429082-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429082-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43820a62-be3e-5a13-8f4d-f2132557f1ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 42911-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42911-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8c080a-ab36-5f2f-b725-113578da95ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429420-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429420-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6df14b-b94b-55be-9502-1e59de368e65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429599-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429599-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffbc1c4d-567f-54d2-b773-dcd10b47f790","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429643-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429643-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d80860-8ffb-5587-ad69-ffebdba1223d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d43ae58-e94e-57ee-b3e7-732c43bc1ae9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 429908coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429908coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae5e35d5-e7fe-57e2-b613-5790326a01ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 430822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '430822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b921e6-dc66-5a01-8023-86e37e4b1d39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 430924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '430924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345795a6-ea9e-5d8a-b5ea-590755fd9268","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 430932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '430932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c70587-8aba-508c-992e-7e64ff9e7c35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 430986-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '430986-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f68817-652c-510a-a187-b2e95749fbbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--215b87f3-85d2-5b5e-91bf-19380f4b4764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 431337-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431337-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a49b2c-9bce-5921-8edb-83f985e01a73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 431betkom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431betkom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f07116-1bf5-5ac3-88ec-687779f40f29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 432012.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '432012.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3728486a-21c6-5d9d-a068-3b4dae69b8e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 432164-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '432164-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71d82904-f697-5abe-b4c9-db39760c02f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 43223-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43223-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e315af5-cdb4-549d-ac7e-00219e72bf7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 432549-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '432549-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--354f248e-8566-56f7-b9c3-14d66f21a5cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 432614-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '432614-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31b9382-b77c-529e-b612-126eb19ec18a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 435024-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435024-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25db128b-5d75-50d7-a72a-3d6d732ba4fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 435221-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435221-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e8e008-211a-592a-af83-e90b0798a081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 435342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--546fe238-9a76-52b5-9cb0-e17fdedbc892","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 435613-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435613-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3324ff85-af28-54e3-baa3-283cedc0ce49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 435678coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '435678coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6cbc32-b99c-5e17-bf74-8dcc2c84b36e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4358-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4358-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0357d75f-6fd5-5b5f-8e7b-048c771564ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 437544coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '437544coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da703ed3-c95e-5901-b9ad-1a9756533734","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 437884-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '437884-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a83db6-aba9-521a-874f-48c749c36f63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 437981coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '437981coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aabcb59-419c-557c-aa17-590aa822f817","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 438027-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '438027-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e019b71e-efcb-5444-9cc6-3a9f47c773d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 438573coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '438573coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dcec215-41b2-5bb2-8e98-40e955a1f794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 438834-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '438834-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f12c00a-24aa-5354-9462-272839dfede7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 438904t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '438904t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0beff8a4-9e63-5adb-8446-cdb077dedac7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 439304-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '439304-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d04ef9-b46b-554a-b273-3ea44986b1b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 43934-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43934-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eefdc65-b239-5f4e-a8ce-3e1a19767b8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 43948893-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43948893-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fff2520-466c-5750-a818-7c5fe1397ec9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 439812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '439812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3312711d-5678-5e2e-9083-24fb22c96876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 43983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a4ef2d-9fbc-5e9a-81ba-f40d893a7bea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 439843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '439843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb603dcd-e2d8-5db7-9fd4-3c6a29d918cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 43telus6.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43telus6.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc3df20a-0f84-5c60-adcd-ddcb42ecf0f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 44-203-608-1340.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44-203-608-1340.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46105643-ffe0-5262-aca7-93837c4c8732","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 441940coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '441940coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce098a4-dd83-56bf-88e6-341362e76714","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 44228-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44228-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c21a1f-8e4a-5935-941f-724d96f4fddc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4426394-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4426394-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8520754-e154-5c06-b6af-10f62c67bfba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 442648coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '442648coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6436480b-75e3-5b5f-9ff7-75312b1572eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 442873-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '442873-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e965845-dd89-5a77-a5ac-86c9f1cd1ce8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 44293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639fc2f-6f1c-5469-9f00-daba125176dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 443849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '443849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb38a13d-b523-5e0e-a06f-5968bb6038f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 444874-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '444874-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de081541-6300-5957-b560-d985b2edaaf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4451994-capitalone.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4451994-capitalone.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba7ed0c-efe7-5b6e-a412-4b6b4d06e956","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 445672binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '445672binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9876bc3-ff10-52b1-98cc-9d9f82895c0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 445805-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '445805-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b707f6e-a331-5ebb-8164-8aafe9894f31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 446781-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '446781-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22db9aab-856e-5750-b579-2244916bfdc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 447251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '447251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aadddae7-3bba-5c1f-80b6-deac1c86ca06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 448231-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '448231-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74a818cd-1e28-5070-872e-a7da914dd18a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 448232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '448232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9950411c-48fa-5db6-9548-2f5278039e44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 448ganobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '448ganobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed39eb7-af06-5118-ae29-a66504dfe299","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 449281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '449281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e38e2e1f-b0e7-542f-ba70-41ef58042531","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 449928-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '449928-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1520f461-24f9-5adb-99a7-ff150423cd21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 451209coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '451209coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fca199ce-b981-5aad-8024-16507c5ff928","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 451238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '451238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5540ea3-6f76-59c5-8457-ccd00880556d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 451242coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '451242coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8f9f66-57e1-50f8-a158-a84057cb7bd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 45125coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45125coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3ce056-39fc-5400-8247-fa6c7b00215b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 451673coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '451673coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8e96f9-08cd-55ea-ae46-65ff34ee1496","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 452300coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '452300coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4de126-c819-5348-898b-74839eb9b0bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 45242-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45242-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6723160c-f034-5109-8cd1-6b1ec8c72327","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 452802-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '452802-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecf657d-5f07-581a-be2f-2e2d22b27552","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 453441-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '453441-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51701107-339d-5898-a265-8b6789ccdb84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 453621-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '453621-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1d0e7e-2b80-5dbe-9997-41fd751e2069","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 45465-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45465-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0922c2c3-2143-5d28-a5fd-840caa8b369d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 455924coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '455924coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4227ed-eb76-5dbf-9559-838dca40ed5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 45614-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45614-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b6329f-6806-58f6-98bb-771d04c2fbe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4564345-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4564345-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa84a610-bd6e-56a2-94a5-c37caafb8939","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 456512coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456512coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9cda22d-bebc-53c1-9e5f-4b7d65fe136f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4567688-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4567688-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15fd01d-487a-5e8c-9619-63ea3ed08b69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 456enjoybet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456enjoybet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76399942-11f4-51dc-b95a-d2a7bb480fce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 456movietv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456movietv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--734d230a-be9a-5382-a3e3-36759985d246","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 456yakabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456yakabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943d17af-028c-5d49-b193-902004fe1387","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 457238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '457238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2898855-60f0-559c-80e7-a8738307f9ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 457294google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '457294google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f4cd104-7b4b-5e83-9c77-1d287aee37b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 457831-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '457831-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efeb42c4-69b5-546c-a347-126371f81e47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 458145-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458145-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--babf7c4c-5282-584d-8ac4-15b74289881f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 458192-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458192-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5213a6b6-d28a-5cf1-903c-fe7bc4f6daca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 458290-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458290-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbc5e0c-b81e-58a3-8e3f-b290121e7d2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 458972-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458972-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9bac02a-fb37-5e1e-9386-6cf1194d1518","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 458987coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458987coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c4e3db-e277-55f1-8aae-cff743f2a0bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 459290-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '459290-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae87435-bc7f-548f-851e-3885b285a5ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 459295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '459295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb67dffb-0079-5fb2-a0cb-3cabc5716715","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 460betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '460betrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d5d372-de59-548c-b271-43d211d45764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 461746-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '461746-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34676856-28f2-5674-bb55-47fff9cbaad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 461963-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '461963-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f12f6a0-f647-5a11-87c0-16854882c306","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 462163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--147a36c1-dc83-58f1-a18b-6c8db8b711b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 462839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462839-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5f4afd-698b-5748-b04f-2d539d8aa93e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 462847coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462847coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bd3765f-7a0d-57fc-a9cd-f06c6e5cc29d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 462847kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462847kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5a9c73-274a-5972-9242-39490fa7a97d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 462865coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462865coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--142cc528-64ef-5d21-b97d-491830f04c97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 463531-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '463531-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec22b7ed-800e-57c9-b800-503af579dd87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 463959-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '463959-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49eaeec1-ab83-5be6-b381-622e73b6a9e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 464820kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '464820kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6408af7-a37f-5a2e-be29-31c34708f219","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4649585-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4649585-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f5e965-9138-51f4-a668-8da1dd6ac7b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4649586-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4649586-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ead624-816c-5b04-ae7e-4ddd70c4a9fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 464betrupi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '464betrupi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf06abc9-fcf4-5b17-94e8-76b1a8b97ed3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82a5d40-d4b6-5f69-90ef-5a52dd3debe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465825-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465825-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7a51d36-2f1c-5ad0-94f2-142b5e42d0e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465891-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465891-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e43e41-2441-5c44-9008-8048b6723294","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465944-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465944-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8586b600-2bfc-5d03-8bad-fb8caaee756c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465betrupi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465betrupi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5ff32-8cf8-5d73-b57b-9184b6a32d24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 465ganobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '465ganobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9df651-5f9b-55a7-b6ff-325757dc22c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 466194coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '466194coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d1ffe4-9535-5979-a3c6-0bedc04d7798","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 467364-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '467364-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ddb4c8-0903-5896-a947-661edc124870","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 467891-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '467891-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1e91d6-e883-5e27-becb-8d583fcffee1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 468244coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '468244coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a755849f-7229-5c56-87f4-d6215649ffbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 468297-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '468297-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e3e78f2-19e1-50c4-9ee1-a7481f0b3c17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4692-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4692-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca926fa0-e3e0-5f13-95cc-4d4c3863727e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 471636-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '471636-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c3c01a-1aad-517a-9dec-9d350542a6f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4719582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4719582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1885aae-4238-59c4-9b29-4c852df12cee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 471958coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '471958coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbacd98-9d6a-5e2c-a3e2-3ac3e2c5f13e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 472649-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '472649-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95485744-b62f-54da-a484-3e696aa2c45c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 472817-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '472817-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71341151-d336-5674-b378-35f4d9b6e4f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4728391-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4728391-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa36cc70-8920-5b30-89d1-f59a0224ee3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 472912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '472912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce47dca-a5f8-50fe-b716-c2123215b93e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 473289coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '473289coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a62e7b-bad5-5058-bf2b-8b5f2f6b887b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 473812coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '473812coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4d52dd-e9e3-5b34-b4e6-284e9f679d30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 473841coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '473841coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316a7575-2db0-50de-bc67-5fb2eaaa7a42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 475123-krakenportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '475123-krakenportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9da72-423b-58ce-ac44-6067fdc24d82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 475340-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '475340-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07bfc94c-17ce-5ed6-aa18-27ec7f314563","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 476295a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '476295a-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75de1982-cb15-558f-9304-d79083f4404c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 476888-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '476888-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--def7c372-1ab6-58bf-bfb9-c5bbed295a40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 477658-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '477658-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302bae7c-8db1-5f19-8d30-e4361eac102f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 478299coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478299coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e13a48a-23bc-57d7-8a1a-ec0c9fca8767","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 47850201e63f7e37892cdd2327ab9ca2.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47850201e63f7e37892cdd2327ab9ca2.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f771b4-f4dc-5944-aed4-a4ccfbd88f59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 478865coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478865coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a8e5e18-3662-54e3-8501-4876aac8cd75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4789452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4789452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e251d05b-f254-521d-8d18-25e62693629f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 479222-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '479222-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4b573a-137f-549c-b118-ffa2296cc02d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 480159t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '480159t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f3025b-e0aa-5021-89d1-6efef5619ddd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 480832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '480832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edc8446-2adc-554d-8a23-562f8d1e00a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 481038coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '481038coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec042f6-1fb2-5a7e-a8bd-746150abf86a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 481924coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '481924coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3eb3c1-e2f6-5b4d-9778-cfd1dce954c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 481betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '481betrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18927d16-04dd-56d3-9b82-fcccfd56a544","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4821-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4821-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03962209-fff0-502e-899d-ff23bc7b2a80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4821093coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4821093coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a69da26-fa2b-54a3-9eb2-ab55c6322abd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0b90e4-9d18-5286-8979-c84aa5d60c70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4821934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4821934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea814e7-1616-5ca9-8857-6e35e8f5774d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 48227-santander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48227-santander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f6942cf-0cd0-5360-ac4b-f9e938fb609a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482321-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4996242-4d57-5c3a-852a-77a8453d45b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482377-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482377-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22df671e-204d-578c-8883-96919e119e4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482512coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482512coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d72e385-e4fb-5129-abf9-f725415eff17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 48256coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48256coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14404a98-8098-577b-aac2-ea3d5f6683cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4827193-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4827193-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe1772c-8780-5af9-ad9f-e9167502162b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4827193-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4827193-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8569be7-6360-5cc3-8ea7-a086caea7822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4827193-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4827193-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726bebc4-789a-5806-b84f-bad41686ad56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4827193-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4827193-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98424e6b-46c5-5cad-8804-2813470e7313","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482730-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482730-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cc3c4d-17ec-57df-ac8d-e1ad64a3f3b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 48273019-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48273019-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3092a59e-a586-50fe-959e-0f7d3e5055fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482812-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482812-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11af36ee-7669-54c6-8d37-264d7332802d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4828194-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4828194-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43bae5ea-eb03-53aa-931a-2753d56b7e57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482858-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482858-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b1e62f9-137a-52d5-b1fd-c67303267539","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482931coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482931coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3337292-d731-50a3-898b-810d116f190b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 48297-pncbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48297-pncbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa2fcf6a-b024-5c54-889d-b4bdd93cab86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4829852-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4829852-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f72512-f976-5173-9052-1a43a3033212","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4829952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4829952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1ddca4-e33a-53a2-90a9-8400f161118f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 482betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482betrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f265fa8f-193f-54a2-a64a-5bd593821ba3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483091coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483091coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf23b93-480d-553f-9e4b-1721b31ff2d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e954c0-02ee-545d-905d-f4476c602fbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4832-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4832-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0934a11c-a799-5d13-8477-7f9efb8e16e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483351coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483351coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7b90d5-4abb-5755-a8bd-4ebfe04064f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483372-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483372-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d16a6a-de0b-5cd9-afc7-24c7bb5951de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4834942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4834942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6451d26-81c5-5c3a-aacb-e1e689a09bfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4837261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4837261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca59810-6709-59c3-9fd8-5a64bbaaf292","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483902coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483902coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ea0539-15fd-5c64-b95c-35e45cf0def8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483943binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483943binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cebc9a1f-e23e-5159-8549-7d6e81413d50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 483sovabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483sovabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b021e6d9-214f-56de-a3af-81ce839c8330","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 485013-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485013-coinbaseportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb392ad8-86cd-5ec4-aec1-162e6e44e2c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 485790coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485790coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51b6e79-4de5-53b6-8932-7abe0bf0ab19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 485836-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485836-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7534dfe5-a3ae-528b-8dba-a0bf7b9390f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 486betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '486betrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8025fa63-e9a2-5310-801a-ff95abfc52bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 487428coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487428coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da7c8c7-3af6-5208-9962-adbd4ce96a3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 487betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487betrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a233df7-3b65-5308-ab9a-01d4c0bf054f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 488543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '488543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f16c0aa1-1886-5e16-b757-5a73e814f027","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489043-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489043-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27cf79d-1494-52df-8694-84b738f0e5f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489102-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489102-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--207e8bfc-11f4-517d-8395-4071d5af415a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489182binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489182binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d49fddd-630f-5deb-8a00-b36f7d55f43d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a05cd2-8e2c-529e-9ed2-80d733d0c7b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489206-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489206-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6152c945-6eb2-59dc-81c4-b45a60d4f059","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a081f81b-fed9-55b6-8e5c-f37d9a9a6c94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489356coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489356coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8ab08b-8630-58bf-ad97-d0123c6fcea7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489387coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489387coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62d3b6ac-bf6b-5641-9638-09626f23b88d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 489912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--044a70e9-cd39-5658-a44a-8870e3c1d65b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 48club-claims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48club-claims.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b22e6d-78f6-527c-a486-eee50aee331c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49010.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49010.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11517db3-1588-57ca-a60f-f4f4f704e81a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 490224-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '490224-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c22a070-43f2-5ac2-bacf-2a2fff82e571","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 490642coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '490642coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f4d325-5c57-5bc6-ada4-02b8f3da9935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 491291coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491291coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600c9481-c757-5324-b5fc-b026df4263b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 491412coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491412coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef946d2-3973-5e5d-b788-c44d0ae36fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49142-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49142-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3b1d8f-3a7e-564c-ae4b-c2bed5d2053e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49183854-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49183854-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fec7530-0aee-5dd4-a626-1f70c441b2fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 491852coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491852coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5349ea3f-55e7-5ef2-aa1a-5b16fedc294f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 491markaj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491markaj.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de57a3fd-0c46-5b85-af2f-8a659723e88a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 492003-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492003-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e4f3d5-f7ce-5df4-bdd8-e9dcbf1af2c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 492059-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492059-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a98e63-3c4a-54c2-841f-9546ba263e8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051ca011-71d2-5387-8735-e6b642664280","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 492641-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492641-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0d0406-3748-5cc2-a90a-6e8ef33f20cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 492859coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492859coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f2779f-d721-52d9-b3b4-ce8b1cc192dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493282coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493282coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e609f876-b1e1-518e-8018-f544e9c98397","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4932949-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4932949-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77da5d7-c100-5fe9-aa13-df94fc800fda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4932994-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4932994-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff98fd4f-50bf-5257-bc05-6604f9f37c1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493335coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493335coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b595bd-c8e5-5ef2-b224-789e956daf3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493349-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493349-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d8d967-c1ab-580c-b21e-f034539e5c36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493516-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493516-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b9db46-ca93-50a1-9937-18769faf3dd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493522-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493522-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33f0e91-f249-5395-b4ae-d485ebae46f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 493929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '493929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed51efc-bc05-5d97-87d2-2677b16ca0e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 494265-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '494265-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50104fb2-e3cf-5d7d-9f15-176f7e5ccf17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 494285-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '494285-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06de96a2-4ba5-5f27-8721-7820af669ff7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49512-vault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49512-vault-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab47d97d-ea62-558c-b3bf-f407e1915b85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 495855coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '495855coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6799e5c1-4cf4-5e0e-a798-290da8896d07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 496773-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '496773-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d18c783-9b85-5701-b8b2-7f2537a8181e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 496929-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '496929-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2004d47-cd4e-5ca5-8659-7ab046fb5756","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 496932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '496932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee5000-698f-5018-99fa-da364d04acc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 497517-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '497517-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91427c7d-cacf-5aa1-9866-fef85abf9597","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 498261-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498261-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7246c5d6-33dd-59b3-a919-f0318772ec28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 498323-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498323-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--494aae09-22ea-5859-9283-bc37e9845895","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 498397-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498397-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f8e6b0-ade4-5faf-88bd-bd3692aafbf2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 498755-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498755-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ae2e57-556e-5492-a29d-e6a8357dd485","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49879232coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49879232coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4ac0003-78c7-5107-828e-ea6c02d7a0f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 499295-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '499295-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9605ee67-f9b8-5e48-a61e-a87e361b9ff9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 49myssac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49myssac.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b94c2f0-5369-5835-8c77-e4815a81b061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4betman.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4betman.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5171db-6095-508a-89c9-1e3515f33292","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4d5fc024daaa30385fa3ab4c913f0142.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4d5fc024daaa30385fa3ab4c913f0142.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0af87a5-072f-528d-9ac6-4bd640ec15a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4khdhubtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4khdhubtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31fa540-76eb-56e7-9467-0aa7519c487d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4ktelegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ktelegram.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a853eef-b4af-5fa8-817e-aa624b21c495","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4onbsc-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7351049b-fb2b-5339-b8f4-a0055b9802f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4onbsc-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae5d4879-31a7-5c95-ab2a-6c63c3a07b71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4onbsc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fbec80-aa6e-590e-95b5-2fd2ea6bf32f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4rabet-india.plus","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabet-india.plus']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec943c4-54f3-5cef-bf87-3448bfe93826","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4rabet-online-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabet-online-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7470bdb-fd20-5d9a-9cca-17453b32dfe7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4rabet.plus","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabet.plus']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3642b4-2f18-53ab-a7c6-197b98716f75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4rabetturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabetturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf1c42c-c15c-5f76-9364-7e90c684d62a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4royalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4royalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca8953d-a020-5d19-b6ce-97a680ec4d32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4s2018sydney.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4s2018sydney.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--030995d8-9b21-5668-843f-b88596b553db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4slona.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4slona.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd9b698a-b6a8-5512-b8ef-c1539c4fcc2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4ukwxgexo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ukwxgexo.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88cf95d-4eea-5dd0-ad63-2b8e889b4c91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 4ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ww-umb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f8b265-78fb-58fe-b595-35ada5b9cd8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5-acretractorworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-acretractorworks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d03bed1-e6f9-5887-a813-4d4b1cc32b79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 500casinotu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500casinotu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--411ba4b5-4ba3-5f8f-8d5e-58f68af48abc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 501752-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '501752-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7fe414-f634-581c-9200-e93567ed4be0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 501972-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '501972-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc24f7e-4cff-523b-97a3-443238a16a85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 502095trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '502095trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d500c9c3-68b2-5f1a-bd7f-ff0f0b479856","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 502858-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '502858-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb32e8e-09d0-5bbf-a04c-577481cdd70a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 502941-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '502941-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c38aa982-26a9-57c3-9d47-b8cecc99575c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 50298-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50298-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16c10b95-adb2-522d-9540-2cf516cd9aed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5029coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5029coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936602f1-300f-5c4d-bde5-8fe223b64167","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 502spinco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '502spinco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17eb95e5-32f2-5201-b602-b2dc2b83d849","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 504tlcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '504tlcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b20ccd-0578-5be3-a9cc-ec3b54c7c5af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 505867-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '505867-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c09b30c-9b95-5696-bb6a-45b026154ee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 505981.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '505981.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbb3469-a57e-523d-9cbc-84fa50272ae3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 506144coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '506144coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebf41d2-6e12-5932-bd46-8178116764ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 507695-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '507695-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d6ae4e-2000-5db3-b304-801cd9df4f45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 50864f2b91ec4f66d3a5ee1be96e2944d12a84e592fb101c6d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50864f2b91ec4f66d3a5ee1be96e2944d12a84e592fb101c6d.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ea5881-6337-501b-bad7-dba9fafe6db9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 508milbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '508milbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a28a09a-6971-54f5-99f8-0d9a9f80a047","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 509110binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '509110binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d60e65-6506-5aef-9165-10d75a51904b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 509251ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '509251ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a161e9a2-8757-5097-8621-ee50cd74d1ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 50btclog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50btclog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb22ba8f-a4d7-565c-b556-f86447ee9a06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 50eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50eth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f90c3b0-4aba-5b6d-ad10-4896a27a7145","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 510732coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '510732coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9455000b-2e14-55a1-81ac-84c1b8964a0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5119874coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5119874coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65606615-266a-5b4a-921c-9cf59fa20596","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512430-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512430-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76451c6f-aca4-51c3-a8f1-8983f7c20c6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512521coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512521coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3a9ea1-50da-51aa-b615-27939fd1ea32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512625c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512625c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f0884ef-d53b-52cf-ba7b-40f153229032","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512625coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512625coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5d1141-3d41-5cce-a9c6-a7b028c204b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512636coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512636coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f910ea-555e-5184-a4de-af979165d156","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512872coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512872coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bfb308f-6869-52d1-849b-ec005cb687ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 512saqqwr12.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '512saqqwr12.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f287ab-79f0-59a7-bdae-7159dd6a9aaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 513yakabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '513yakabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25bdab1d-b9c8-5563-aba1-31e31462d482","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 514278-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '514278-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17ba235-fc5d-5ad7-aa39-52df472d90f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 51427coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51427coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e20b99e-87fb-54bf-9485-8c31ce39655e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 514469-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '514469-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d5ad52-480f-5b9c-9076-2a99023b8bbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 51455google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51455google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf845577-d972-5530-9180-0b8f10098977","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 515612binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '515612binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edf83c7-e0d5-55b7-91f6-42608e26c6bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 515678-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '515678-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f2c1ef-0759-5390-a9a6-baf5581bcce7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 516193robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '516193robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--440f1ab2-cd71-5c73-8328-a3d61dc6de1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 516473-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '516473-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85406600-13c8-5357-9070-658260d40f58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 516728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '516728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--653bca25-482b-5764-9ee0-b05e1adaff8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 516starzbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '516starzbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--474e3a5f-f692-58ae-af03-b4ca6afdb854","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 517266-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '517266-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b9b8ec-af26-5424-98c7-badf6e0a397a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 517393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '517393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba10c3c9-9685-597d-a91f-6da9392aa3ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5176-capitalone-identity-verif.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5176-capitalone-identity-verif.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df35c2d-418b-57a7-a19d-eed2e090c686","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 518241coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '518241coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd00e234-b2a8-5f75-b67a-7c9ca42d6061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 518256-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '518256-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93269ad2-b055-560a-8608-f2f803db6b9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 518262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '518262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab629cb-1ac2-526c-a447-a8b21d59f5b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 51923874-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51923874-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b31ff6-e168-5e05-b525-963ccaeff356","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5192891287591.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5192891287591.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f5648e-418c-54aa-8fbe-e3d1bc059c63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 519683-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '519683-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e84399f-1a0e-50c9-b53b-29f2fb448c4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 519782coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '519782coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3322bd22-3096-567a-97f0-f16fff6840b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 51kbp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51kbp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54db95f7-623e-5931-9474-9362d6a8f9de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52-93-178-234.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52-93-178-234.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cccabb-5d34-57ca-ab64-6fe049d68a1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 521267-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '521267-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd15844-e34c-52dd-937d-9e78c548781a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 521648-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '521648-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdda85f-72a1-5607-a6fd-438bf2365ea9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 521958192581925819285.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '521958192581925819285.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c70d3d0-39c7-5b10-a8c5-f1d4919ee144","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 522352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '522352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd6b378-c25f-5139-8145-81a0ef46bb1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5228502-522.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5228502-522.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af79815d-8c88-5ac2-9bfd-22dd9d41f12b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 522921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '522921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--889ef7b1-ae14-5395-ab9a-aa9c9ebf2b8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 523159-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '523159-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee32b6e-a115-5945-a372-9b9e52d994a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 523231coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '523231coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4362fc-6af5-5762-880b-d5f152846927","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 524122-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '524122-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0060dc14-55f6-5eff-8079-16342a09cd0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 524163coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '524163coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899ab27a-c5ee-56a6-b144-a68a83cef336","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52479-santander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52479-santander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d8be44-08d1-5207-9b3e-bc8bd7b07a8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 525156coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '525156coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1894edcb-337e-55bd-8748-61fbeb898933","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 525273coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '525273coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d34663f-87fa-51b1-a82b-49b604f4f46d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52631-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52631-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a99e44d7-fc08-519c-80c2-e7315ecf1698","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52632-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52632-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3529746-1854-5241-8823-ed74a7326ae8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 526391-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '526391-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7e65aa-7981-5176-adc2-3fe8790f36d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 527618-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '527618-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a377bd-4e20-57f3-b29f-52eb099e3c83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 527903-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '527903-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be22a742-d395-5709-b4dc-96e8cca8aa3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 527941-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '527941-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bbc37c-dd0e-529e-a8f2-2e0100f08e1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 528021-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '528021-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91384b9d-3471-5c08-b578-7dc36cc87140","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5280520-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5280520-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff32fa8-a451-5452-9123-2749acc82751","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52819-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52819-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d38ba86-7a71-5822-a662-373b3e4bad07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5282749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5282749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c06ead-e408-5322-8f27-bf10deb96272","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 528621-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '528621-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b25dc811-ffba-5a52-a4d4-91cc2794e9b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52879-santander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52879-santander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22a8193-e14b-5dd0-9570-27cd66816118","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 528905-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '528905-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45ea63ec-8cac-51d6-a956-6c1839a41eb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 528kolaybet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '528kolaybet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66fa3a51-0122-5e69-ac0c-2999933c6665","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5292395-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5292395-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a20c32a-0981-55ee-be65-8ca11307e2d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52938-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52938-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb5573a-317c-5028-a103-20dbc336d695","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52938-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52938-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13a0af3-509d-5bf2-90ed-6b1903f3e5e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52938-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52938-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fb92d3f-9c00-58eb-9a95-4c8e4f2d5029","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 52938coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52938coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca4e877-9527-5ffb-bc48-8e174756d554","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 529825c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529825c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4173b3-06fa-559b-9215-c8cd33db4491","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 529825coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '529825coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f90de4-7de6-5a59-a22e-02b747762f13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53-connect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e81ded-70e3-5c2e-a504-47dd79457b14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 531586.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '531586.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd46b0a-8dec-589f-8355-3ab1178a2f60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53253binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53253binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4d2be0-f852-549b-9d4f-3ebb6d4ec024","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 532981-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '532981-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d15a6c3e-aba7-5947-bab6-d392e1812b3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5900d574-0201-5de1-b7e2-7de8ad569c50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534212-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534212-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37856d74-9472-5cd3-8023-a3cc401b6140","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534212-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534212-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b8a032-ba68-52c0-96fc-0c959e54571a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534245google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534245google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ceb9af1-77c9-5a6b-a63b-f1179f809d77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2c3ade-d5b0-5447-97ea-4dc5c5448219","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534786-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534786-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d71ee4-5368-5cba-8098-4d5a6fde5df2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534798-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534798-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a3e42a-46a5-55a2-a048-5f12acc39a32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc2eb81-5fb1-57dc-8d47-550ee28bead9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 534835-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534835-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b9c0d0-12eb-5e55-bdf3-4c9e0d94db8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 536182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '536182-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75993acc-1354-5c7e-95c4-02fe047cf06b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 536835-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '536835-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e43e2f-8b4b-5c01-a949-c2f523dd985e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5370-chaseaccess-auth.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5370-chaseaccess-auth.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe44b99-aec5-5da3-b25a-435d1e996892","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53727-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53727-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdad78ef-56cb-55e4-82de-c88224c458d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 537441google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '537441google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29824256-0fab-5957-9e79-b675e00b704f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53758-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53758-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea06e9a2-9fa4-5bad-afdd-eed86f560799","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 53781coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53781coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee044ed-7def-5513-b9aa-5e61ae498589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 537831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '537831coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--284062e6-ddb6-58a6-b5ef-f571fe561b56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 537945-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '537945-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b37e260-e210-55e4-a4cb-c8ee3f0fbab9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 537946-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '537946-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--201aa966-22ad-5fe6-8eb9-1f2a99b663de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 537ganobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '537ganobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7216ee9-fabe-5815-ac5c-f11a6c0396aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 538944-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '538944-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc8565a-c901-54eb-8d2d-873439d8a957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 539180-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '539180-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f2b686-29ae-5f1d-97e8-297619555405","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 539331-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '539331-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb70a1d-74aa-50b9-b8f4-a3be98eb3141","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5398817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5398817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6adcc14-eaf3-526c-98b8-c4ac4be0ecbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 540289-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '540289-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61d7d02e-b4e8-58e5-9ac3-e3a354a2c516","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5410902015b699edbdc167e352fc7762.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5410902015b699edbdc167e352fc7762.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a9cbde-3d47-5fc7-ac92-de27420da049","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 541354t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '541354t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2922b323-ba3b-5519-9be4-75a4fb840d9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54162512-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54162512-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45135c42-4283-5bc1-ad8a-45d71f5d9664","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 541982coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '541982coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c8ffa4-0632-5c70-a5e2-e0510230840a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 542812coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '542812coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69eb022-2f47-5d91-acc2-5b7c180cdeb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 542957-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '542957-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4e150b-b9e8-58a5-bfa1-1238debb8a6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--987885a5-b49b-558a-ae8d-73ee8fb239e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543298coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543298coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5089262f-ee19-576f-8d80-261944dfb1b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543343coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543343coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8955a864-2d4a-57e1-9b8f-4df79b0eafb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543532-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543532-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f84cca5-3d7f-549b-bae0-0f2a34ea8d91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543654-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543654-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbbfb63c-1c1c-57bb-8520-9733e57678a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543723431.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543723431.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f87c36f0-f020-5669-aeea-557a8dabb1a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 543879-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '543879-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf9a114-707d-59a5-9b07-f773b016d89b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 544312coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '544312coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2a5a5b-ff2a-5635-bbb7-8222fd1fd8a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5456127-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5456127-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ae7199-fc64-5d5a-b138-e8f207f48a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 547192-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '547192-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db326c81-6c93-5ead-b506-0e232d2c9032","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 547823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '547823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92ec27d-80a5-5c85-aa5e-1417422bc36a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 547890-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '547890-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3706eaed-c889-5058-82ea-b2d0728a7671","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548115coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548115coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff5c2f93-8ada-5ee4-baf5-b8ebba04dfd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548231-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548231-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c184f9-abdc-5a70-b6e7-71b4f3f1d6ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f267d3f8-8312-5cd1-b6cd-7b53d3bff05b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54827chase-acceweb-auth.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54827chase-acceweb-auth.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b2acf3d-91f1-5d12-80a6-a0610102e935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8dffe5-265b-5997-9fcd-04ad22fb3f32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548632coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548632coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6deb3fbd-3ad9-5984-9c68-918579066d28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 548902-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548902-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0307a83f-34bc-532d-b3dc-6e25934f01c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff37cdcc-cf34-5f84-959c-2ac1025b590c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54940-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54940-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2f2bec-cda5-519c-928d-25fd0a238c2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d958276-262d-54fa-8f37-677fac882648","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 54943-usbank-identity-verif.financial","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54943-usbank-identity-verif.financial']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cccc3e54-8ef4-546a-a67c-372280a713f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 549832coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '549832coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd60ff66-709f-58b1-b8f9-b5ecca3fac3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 551839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '551839-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6edcc53-9cbe-5cb3-83b4-b3b80241be7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 551924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '551924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d805d58-a5b7-592c-8cef-9906a415f18e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 551947coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '551947coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53f6bdb-6162-5bf0-8327-92309d394322","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 552015robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '552015robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e3c1cc-534b-5686-8bf9-61e614a6c7f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 552189-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '552189-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffff4222-ad0f-547e-b2c7-3ac7d4fd7d8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5523875283758235.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5523875283758235.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce8fcb8-d3d0-5b1e-b786-5b92290265a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 552814-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '552814-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fec3954-b7c7-5055-a1c3-e332b2574545","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 55302-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55302-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb95bb93-4e8d-5e55-ad7d-27d71e6e409b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 553162coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '553162coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec2f919-2eb3-555a-9863-a26b807d7cb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 55465-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55465-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f279fad2-4d75-5c96-bf80-74bbceeada1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 554793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '554793-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c7fc3d-db33-50c3-8c19-488ee35abc95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 554878coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '554878coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf2acec-9958-5376-9779-b2984cc0ce97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 555373coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '555373coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02634325-0965-5fe1-ad38-0869d711cb7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 555422-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '555422-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3298316c-8bb8-5c7e-bd7f-52d1cc6ffe0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 556casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '556casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e381627-baa8-577c-8d00-e9cf0fb2ccbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 558212.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '558212.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af03e5fd-755e-5a99-a396-aa952c2268a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 558481-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '558481-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b6022c-bf4b-5cde-bd7f-de14ab059114","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 558890-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '558890-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74a57bd5-da37-55fd-bb85-2b35aa579d3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5609614-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5609614-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9831c1b5-6792-597a-a4a5-8821f8e29bb4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 561241coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '561241coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ca7e6f-cb4e-5d81-b8d8-8668568ee217","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 561372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '561372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2f1d2f-1070-5b9a-9736-95e7d1c0629a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 561892coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '561892coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9be2e61-3287-5906-ab8d-1123c84a03d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 561ed10cf5f71ba20a1eab5b099d2093.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '561ed10cf5f71ba20a1eab5b099d2093.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86a1721-28cf-56fa-a07d-8c0247211836","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 562162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '562162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--850db2c7-760a-5690-9529-9aa5ac1aa2f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 562487-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '562487-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bd324c1-fcf2-536b-9f4f-aeb72b4243c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 563216-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '563216-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5dce98-42e3-5167-b418-c2bf126f6700","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 563452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '563452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0c3465b-6a5b-5faa-92cc-4f10e2c71764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5634coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5634coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c20a98-25fa-5639-bb6a-49b4ee5f9c5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 563712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '563712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53bd3daf-b715-5077-bae7-ad19bf64891b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 56547-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56547-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352452d8-710e-5160-8359-44da8ab92cd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 566435-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '566435-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65c25af4-954b-5712-b484-ce402ff9cd4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 566875coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '566875coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f752a6-5b31-55e0-b5f5-16680d74f2ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 56714google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56714google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feb61b6-4bcd-5a5e-9611-5df29627170a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 567334-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '567334-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b4c225-337e-5e55-bf7b-84091dbb2bbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 56741coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56741coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d46c59-d82c-5922-bbf5-4a18297af115","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 56770coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56770coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09c703e-7351-5aa0-aff4-ea3f66773818","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 567835-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '567835-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--119f5a77-0122-50c1-b055-07b6f77393e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 568114coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '568114coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--686dc86c-3142-56f2-ac39-b614ff9c9f9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 568137-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '568137-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45741b28-c486-51dd-8835-0887f1791cc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 568612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '568612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--066eb06d-7b4f-5d5e-98da-fa0cc09401e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 56947-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56947-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6719b8e2-4c9a-58c5-a31a-63b17980ea53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 570637coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '570637coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1634205-4e58-5419-a17d-bc409b47e376","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 571944coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '571944coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b91d80e-4fa4-537d-b200-c9b2b51f7f71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 572848-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '572848-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257b7fef-71c7-5c6d-b4dc-6b997ad6d43d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 572913-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '572913-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dab9ba3-2151-5d41-9040-5d194d83df0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 573812coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '573812coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cafaaa-8936-5701-a1a1-f16fdc332ce5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 573823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '573823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c04716-d6e1-5f7c-9a38-bdce03885d98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 57385-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57385-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d82c3e4-8477-5605-a209-751f37ed66b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 573958coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '573958coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76c8a4e-c65f-59c7-bf39-bea4cddb3f28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 575bb259e06be4d65addf462282ddebf.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '575bb259e06be4d65addf462282ddebf.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81609df4-93d6-5cff-87e7-82370d81c196","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576193-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576193-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e308387-0da0-5073-895b-110d1b60de05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576245-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576245-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd676dc0-546b-532b-bbaf-67433a6d5663","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576412coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576412coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4284f8b7-6bd5-541b-8f1a-d2988425c509","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576448-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576448-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9062091-6a87-509a-9700-86f93eac34b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576521coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576521coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632e2d54-6a17-52cc-8e38-12ab12ddc59f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 576824-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '576824-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0eacc64-1287-524f-a65c-158e79a0f741","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 577273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '577273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59febf23-9de2-5a55-980d-e663c0394bae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 577658-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '577658-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a738d35d-5ceb-504a-8b76-1498a80b3bb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 57791-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57791-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ea1b1c-d8d3-59b5-b931-421eb3028dc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578219-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578219-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88c6a6d-f3fa-5aaa-ba4f-3a8c5bcf4f7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578241google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578241google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0091ebcd-00f0-5245-8937-1db7630fe040","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578265coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578265coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9dd774a-7d9c-574a-8b16-9a95baaafe54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--273de557-b989-57b0-a39d-bccb13072db6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578361-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578361-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ada9f1c-af7e-5507-8a73-505994dd6f11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578392-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578392-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a30cab2-6303-5212-acfe-dc15acd97ebf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578521coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578521coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d03266-dd5c-51b9-aada-7c19d999712e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578523coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578523coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b56f6e95-95d2-5a9e-a3a9-7910ff574dda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578643coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578643coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06e73a36-3471-5332-a5c8-63175a6f118f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6488de5f-391a-5eb4-b0cf-4c2f045e3c79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 578992-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578992-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b2c5a0-d8d9-5c54-81e4-821988444adf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5790-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5790-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8164722e-1878-58be-be68-fcbf0a99e9d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581094coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581094coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b9bccc-9bc5-5cc6-a283-9354f0307f23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581272coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581272coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8750b607-986c-53a3-adba-7436945d7e3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581294-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581294-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17eac949-c377-5d86-bc6a-e075736e11b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581396-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581396-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2dac71-f2f0-5831-a97a-5fa8cd38839e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58142-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58142-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef1e2dd-8bfd-58f5-96e2-f4d131c0fd77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581460coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581460coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88acb4d-f8ca-59fe-aa9d-719d712614da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5815-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5815-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613a674e-4b7e-5588-92ab-e7af12a1db1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 581553t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '581553t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f4fcd5-9ff3-5ec4-83ae-103effdf9420","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5819913-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5819913-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d703b0d7-a84f-5446-9128-736378cb02c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5820013-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5820013-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a66854-7144-5a37-887c-dd510c68f361","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582097-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582097-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2031402-ae58-5e2a-93db-9b2d23456af0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58210-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58210-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20fa0e3a-8225-5b86-b29d-333874e49528","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582191-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582191-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e55c281-b07e-5fc0-b2e5-9b62ca20bc63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5821919-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5821919-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f17527-e568-59af-a253-c67e52ce9404","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582191google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582191google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2eef9ca-3df3-5556-8abd-f6328481730a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ff9218-fe0d-54af-8fbb-345039d3ad5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31322afa-a6dc-5616-89fe-5b8a96d17700","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5823942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5823942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab8f666-8738-5a8a-add0-922b038fa773","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5823942-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5823942-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--703bd8fa-055c-5615-8bc6-f9c214926265","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582413-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582413-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b948931f-00c6-547c-a0a9-3799664f3b25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582729-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582729-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9724a546-5835-5e38-9e70-af576925379e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582735-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582735-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc53b4e-5d6c-5a2d-a680-f7a667ec8ce8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582750coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582750coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3e90ec5-6010-58b7-80a0-7d5230e934ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582799-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582799-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad935e4-e9bf-5a03-b9a1-11cfc9c76fd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582824-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582824-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3db960e-f456-56b9-b1c3-b3a3a961608d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582828-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582828-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--550a5e2c-89db-53e2-90e7-2597092bdabf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582843-login-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582843-login-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2229d93-c713-5efd-8169-1ef7165886cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582855-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582855-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7663ec-2ca1-5485-8da2-3639360460fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582913-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582913-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574ca381-5f45-567c-ab44-fe0a32827814","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829219-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829219-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d3a019e-18d1-5811-9984-67ef0885d247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829245-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829245-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1285f8ad-2641-58eb-888e-01108c69779d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829391-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829391-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1970afb-b1d8-5344-a8bf-810681070a0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829492-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829492-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f35c85b-51ce-5838-a30e-4dcb249d0d99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f0e2cd-652f-5b83-9189-2044372b5c93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 582959-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582959-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761b302d-1a64-598e-bae2-b8987c82a8c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b80173-55bc-5260-bade-219b6d66b7fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5829939-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5829939-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c028ab83-d48a-54a0-813a-eef940598568","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 583131coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583131coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--054ea3c3-85a3-52ea-8958-5739d9589c0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 583184-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583184-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c972a494-fa8e-52a3-bd96-68f7fe77e560","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58325binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58325binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cca3a79-0e78-5ce6-ab40-d830149c9cf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fcd604-34c6-5853-9874-3e64d403e580","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 583434google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583434google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e0fc056-b560-5019-9955-2a68105924bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 583891coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '583891coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312cd6b3-e552-57e9-a0e0-1aa2dd51ea54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 584316-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '584316-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7eaef1-1f01-536e-bce3-da8d78c5e08f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 584328-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '584328-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e7f574f-77d3-5672-aaa6-46bff96868de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5844-login-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5844-login-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83762a4c-36ba-57d9-b46c-1b43dc480b77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 584642-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '584642-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d178d232-29d7-5f85-9699-96a6774cb873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 584907us-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '584907us-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--630ea46c-47d5-59f2-8b0d-7f02a26ad1c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58515.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58515.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a1b0f0-3ea3-5b18-b6f0-605bc3769894","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58574kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58574kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f50dd18-fcdf-5a02-b6ac-d07fe9c24eff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58619.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58619.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c004ea6-c377-5262-a01e-d8b441257b82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6025f3-54f4-5767-a61e-91a38183d013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587262-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587262-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96dffd65-3bac-539b-a31c-2de36d5ec33e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384dbff7-4581-50ad-9ff9-acf844ded2ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587295-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587295-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0424a911-e016-5d67-9d7e-d435f42d0be2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587493-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587493-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c4e064-a8d8-51b8-b4e8-88bed1d64faa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 587512coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587512coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60911bf7-cb36-5b3a-8df9-83bcacc03c7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5883291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5883291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea3fb0b-a157-5cd4-87a2-31360431ac78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 588915-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588915-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba80480-61c9-5092-a073-2553787932f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589043-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589043-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7991d09-d441-59a9-b24c-b3ec808d79f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589201-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589201-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec3f7e2b-fd1a-5af4-befa-55d7e78f6c2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5892841-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5892841-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a593d7a-58d4-5313-8c39-fd98c027e066","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589321-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1c6f2e-f370-5b74-ae86-9424d3377f42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5894038-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5894038-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a674893-5cfe-58c5-84bf-3fe686bb3fec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589465-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589465-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa71f576-4ebe-5b24-96f3-c94e48d78e65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589483coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589483coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cdc53d6-72ba-57dd-aeb3-59c88824359d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5897654-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5897654-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becc4448-0527-5c3c-8f4c-b2f60b2b8605","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 589onxrpl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589onxrpl.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2ae111-2468-555e-ada7-7178624a5563","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 58h0wzk70k8d.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58h0wzk70k8d.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--029f3a32-7d6c-5aea-ba7c-37018a939d9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59038146-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59038146-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c62751-0350-5e2c-bb4f-6d5d8f823755","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 590525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '590525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb29857c-1fe2-5cf8-acf1-e54c072a0146","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 590634-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '590634-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa23396-e12a-5d11-a1bf-86cf9b100173","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59102.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59102.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f6bd15e-5a37-5a1a-9ba0-71c117960b60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 591237coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591237coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74963c9a-52d6-55a2-a71f-f4a6368448c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 591241coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591241coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--272521d1-a26a-5897-ab11-acb9268662b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5913941-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5913941-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2da9f786-15e7-5ba9-b830-f28c68e4c92c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59148728471828.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59148728471828.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa596128-5431-59a6-929b-31078b288eeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59149129-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59149129-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae8b1ae1-25b3-582c-9275-02789afc5dda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 591861-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591861-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e6bec9-9b5f-5a09-ac12-091b616a8d3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5918coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b73f66-0fb3-5156-a034-0fe3cb2ef610","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 591942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c968a1d-799d-59b1-8c50-ba7b0314f4be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592013-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592013-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc30ddf-5a71-52c4-a334-95ba8d7cdca6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592045-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592045-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f824678-e3fb-5552-939c-7f1503480da1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592394-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592394-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d611cc-3f69-5259-99f1-12799c5f8f86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592412-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592412-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--965e60d7-dab8-5fb5-b452-c0ffed864b5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592641coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592641coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0611eed-3b09-5ab0-a507-a378fc187351","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592817-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592817-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9fb0a53-255a-5098-b5e9-08665c2a953a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b6bd17d-ef26-5ae0-80ea-c977f5290db8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592839-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9539bf-9fe2-5f3c-b9ad-b12df481f059","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592849-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592849-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db39bab-7a05-5e7b-b8e5-0ca54074ddff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6de81db-7fda-5648-a64d-09ac7809092d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592943-login-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592943-login-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c743e40-dc8d-56d1-8084-493121eab7c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5929595-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5929595-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e14625-39a6-5cc3-b67e-618e5f59e294","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 592981-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592981-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80ea7bb-2819-5cf2-926b-38d7707f9644","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593021kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593021kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5919c2-db5e-569a-ad39-bbefabe24e42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cf9a68-5f45-5dac-9673-b5f6352e2e0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593335coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593335coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c804306-4c44-5168-ac12-d5380169122b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593401-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593401-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97463e3-aca8-5172-ac6d-91da8d3ddbe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5934295-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5934295-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeaa97ee-583a-5602-b305-bc530e3bf851","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da352fc5-4721-5141-9db0-49db6446af5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902bb5e1-4fdb-5bd5-b443-02a4566cc149","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59399-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59399-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3468cde-bb20-5d25-86cb-43536aea90f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 593992-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593992-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f1f1b4c-d578-5c08-bafb-1ed58b995387","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 594315.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594315.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15de4e43-6aa3-502e-8e32-0f1d6bb2933b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 594384-login-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594384-login-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a265cd1f-2b4c-5305-8dba-5874a0a5bd6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59443-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59443-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08faf2ea-26c0-5c89-9f40-62469a2135ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 594576coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594576coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218f797e-11df-5323-a19f-72ae4277eabc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59476-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59476-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b6929c-4b63-57fb-84d0-8490fa66beeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59477-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59477-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2ba8ad3-2c66-5d85-a331-e9c6c27133ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 594785-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594785-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7ba657-d60e-52b7-8aff-f52a9629a5e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 594875kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594875kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591d58c8-7b0d-51f6-8eef-96a7b10fe98f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 595251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '595251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbbd3488-1978-5caa-b6aa-a3b7ebb1895f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 596312-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '596312-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72751949-496b-52c8-a259-41c521b63318","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 597183ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '597183ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93f3df28-6231-5db4-950e-869abea02bed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59830binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59830binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e0165a-b746-5f39-b174-eb977b0f5f8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 598342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '598342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2c0da1-445c-5e54-b072-c4e76d0da7c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 598371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '598371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e340e0-3c42-5743-a28b-93b81468a7ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5a9d46-6e68-5122-95c6-aca5ee7cf87b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 598611-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '598611-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83123ca6-7248-5c4f-87ae-17bfad2b021a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 59872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c392b0-a39f-5628-aedd-f520440589f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5991324-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5991324-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7a4911-79f4-5d0f-be70-42aa3f1fc59a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5991932-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5991932-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5143dfdd-7f79-5a2a-9530-541b3ad7702a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 599292-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '599292-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f3cc65-e3bb-5a99-9f7d-fd0f2b865fed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5b2fc0ac598b1623f89d25135d4951ac.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5b2fc0ac598b1623f89d25135d4951ac.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fe9288-1435-54c2-9811-15317c3c0019","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5c2f1baf2a08d47f29b1cd84ccff308e.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5c2f1baf2a08d47f29b1cd84ccff308e.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1c60d2-2656-5e56-bad5-f51bee483bb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5c888de9aa127c316aa4a37c78bc6df9.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5c888de9aa127c316aa4a37c78bc6df9.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1799f7e-afcd-568c-875a-fd3d8a2455dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5coins.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5coins.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccde2522-43e1-5e86-8c17-f1181c35b253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5d97f5e538120ab7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5d97f5e538120ab7.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf062ce-efba-5c4e-9ad2-adc7a66072bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5gringode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5gringode.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3dddedf-b136-5614-852d-ad44b55f0fe2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5gringoswinit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5gringoswinit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f222519b-a89a-59a6-ab21-c93c1e4fb0a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5kbm66kdabg.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5kbm66kdabg.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42598c71-4079-5a22-a8cd-ff68f7dae42d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5movierulz.kim","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5movierulz.kim']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f1d33c-a7f6-5bf1-b070-20f8b8a3fbb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5movierulz.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5movierulz.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a0a43f-206e-5a0c-af93-c67579fff148","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5moviestv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5moviestv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--997cc25f-b496-5e74-9eab-696afbc28e60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5parkfi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5parkfi.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57e6ce1-4266-5c93-888e-dde7cb9e7d7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5qe8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5qe8.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1cab6a-d7cd-5d7d-b382-b80a76891b94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5qh3mq0gexai.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5qh3mq0gexai.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc6061d-bd82-522f-b678-b8682057edae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5s78cyfu9gii.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5s78cyfu9gii.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8127bc1a-4801-53ad-928e-e675c788f340","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5ww-umb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d3e5d4-f270-54d7-be57-cad361320362","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 5x555.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5x555.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93adfe2-268e-5db6-8c01-76ca1b5f0b85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 601487i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '601487i.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbe5fc2c-3816-5a48-a730-d3443cdc6b5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 601gorabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '601gorabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc68df-a4a5-5ce5-9b79-a0403ea38348","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 60215.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60215.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d19e120-1879-5150-aaf7-d63dbbb12eaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 603901coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '603901coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bb0a7f-155d-57c8-891d-4a8653a8e8f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 604541e9b351.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '604541e9b351.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2523ec9-ea81-574b-b8e7-24a5393ca06e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 604824coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '604824coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cffbfa6c-0a4d-546b-a01a-1a9ccc9ecc3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 605192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '605192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c790fc46-d6b1-5a69-9edd-a80fa2d3a62c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 606412coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '606412coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b6b0ee-012b-5ab8-9d5d-01c9cfcde199","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 607688-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '607688-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda61d8f-505d-589c-8815-b496d018495d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 608920coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '608920coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9188b828-a158-5531-85b9-668329e95ac4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6089513coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6089513coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3ebdbe-a061-53a5-89dd-c88da5694a22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 60cek.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60cek.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8259f239-6c57-5a77-a1e0-ba35f1002cea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 60cek.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60cek.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3740565c-05bc-511f-a938-b9570ec0ec0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 610242-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '610242-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928cb574-4253-5504-98dc-1f7c5c907bb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 611gorabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '611gorabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba365b1-c7aa-5c78-9df2-1b44e8e3e4cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 612071-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '612071-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f0a329f-bfc7-5def-97e9-3db408713d8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 612597coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '612597coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801d0f65-7d67-54d0-9a69-4118d4eb5ab7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 613312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '613312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c210dc98-7b3c-56d3-b7a1-9d58e7e18d60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 613901coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '613901coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd9ab01-7a83-5116-ac10-78a4a2a2383e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 613982-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '613982-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fbb605-090d-5362-816b-65bf7024877c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 613mariobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '613mariobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc896d6-2bea-592f-82bd-b529110bbf0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 615251coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '615251coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c32a508-dff0-5981-aa4a-7828fcb38163","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 615483-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '615483-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84c5b96-e17c-5f8f-ae5c-ca9c7733b187","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 616728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '616728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4f6f0d8-375b-55ec-8d10-b959f6f6a3dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 61732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48dc7e8c-9f6b-5e5e-b074-bd6f977b4f8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 617523-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '617523-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba800a1-efde-5221-b82d-971b5e594731","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 617927-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '617927-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5f8838-a0b9-5e1d-95cf-ef2508f108b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 618124-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '618124-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caa8a3a1-e444-5272-a46a-c5accb6da5e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 618172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '618172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c88f1d-91d5-57ad-ab43-87dc3246a64c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 618278-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '618278-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3fc08e5-2502-5cfe-9fb8-9172e54e1310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 618729-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '618729-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--628875a8-40ae-5645-9789-4bc4796dbcc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6195-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6195-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfe7fd5-f15b-5744-8d4e-121b89ab6bfd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 620571-regionsbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '620571-regionsbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a6957a-8c14-55b3-859e-2a26bf2b2674","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 620571-wellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '620571-wellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d08dfe0-a1d9-5875-ba86-15c47bed8927","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 621993-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '621993-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f9f187-b092-5cf0-8fc8-175889db2c3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 622172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '622172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5237a8-4cae-55f4-8231-8d1d53ac14d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 624196coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '624196coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda39c38-ea50-5ffa-98df-5c4a732bea25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 624759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '624759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac78b8de-b141-57c8-954f-040ed04531b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 625123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '625123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b9e880-39d8-5efc-b715-d1c38c9e0a24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 625322coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '625322coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b09966-fb66-531f-981f-2259f78c0e7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 62542-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62542-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f1217a-4da3-5352-97ae-ddc04bd1891c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 625775-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '625775-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--998c2c08-2a09-5164-a470-c5db0808edd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 626410-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '626410-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5549cc75-279a-5ee3-95ff-52c428987c09","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 627003-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627003-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69f43bc-6e40-5126-80b7-6b6035012a4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 62711-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62711-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9fb081-7b69-5e23-bbf5-9e4b01216882","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 627212coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627212coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e8bd39-ed52-5812-8e0f-4e99636f6396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 627283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ccb1d4-7afb-5420-b514-3462b3bc8c4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 627363-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627363-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58990ab2-b363-5088-9f35-c9576ff652b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 627382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dab67fc-8459-529a-8f3c-39ede1be841d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 628191-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '628191-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee2f360f-1377-5713-82a1-706434c2992e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 628312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '628312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d4b12b-84c4-5bf4-9563-bd56411611dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 628312coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '628312coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16f58fe9-2050-56d8-b054-5d5784a454c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 628793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '628793-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57ec888f-dd83-5515-b99c-7df86362ddb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 628852-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '628852-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2edbed2b-171d-5a8b-af53-a96d30db40e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629113-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629113-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca81a60-da11-5b0b-9a41-bbfd1dbd4abc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 62912-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62912-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a3da527-bad4-5266-be84-4b9412b472a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629341coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629341coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3650c96-b57b-5f60-af0c-f0cdfcc04860","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629384-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629384-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63366a67-4dd7-59f1-86c9-14231cbe2ff1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa77cc19-4728-5602-91b6-3845571956b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629631-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629631-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff32fdc0-fcd0-5058-a31e-e83543cfbf22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 629851-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '629851-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705908ac-c2d2-522b-aba5-7509760b8086","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 630926-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '630926-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac286d85-4291-55f7-ad7f-c5d1d565a46d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 631829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '631829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef6d2d5-e114-519b-94ef-33d4c354a550","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--307e784c-8de6-5754-954d-2585d61d5454","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632597-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632597-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb21c3f-ef98-5a6f-9b81-3b26dab0c207","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632615-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632615-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b4ee1b-a688-5ae3-aba4-f8045bf19c25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632615-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632615-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ef4d2cf-a449-5d97-b721-1ae61773c830","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632615-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632615-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e64f5b49-c283-570f-9dee-ff52f8f3cfbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 632952coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '632952coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3375bc3-c967-5438-8dd4-ee0f7983ce50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 63425l-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63425l-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44018a5b-abda-57bb-90e7-2a70ee37462e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 634518-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '634518-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39b658d1-ed4a-518d-9058-df1a35328acc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 634910.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '634910.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3b063c-277c-5abb-bb6a-0cf19229228b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 636835-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '636835-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d345135-f560-51ac-b727-6ed9bb05382e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 637281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '637281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8470c855-df8e-5ee0-9a0b-a4440c6a09a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6373725-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6373725-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f4c1a1-2e06-5aba-acd9-581bfa599193","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 638724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '638724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15438467-7dcb-5c8a-bd4b-0f205c3c2a67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 638757-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '638757-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e727671-df75-5709-8744-c0e69ffb8468","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 638meritbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '638meritbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda4edf4-d188-59ce-aaef-92280e6b323d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 639298-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '639298-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e630648-8d6d-5431-9758-c5d38111461f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 639624google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '639624google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5d8ad32-d409-5e13-9f3a-604a6a982fd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 640avrupabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '640avrupabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60f4b7e-4e45-5455-9729-44954aca86b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 642387-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '642387-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce244dc-fd95-5f33-bf81-9f16f57b1551","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 642391coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '642391coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4afafb-3c69-56d5-a383-b764a5fc676f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 642831-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '642831-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95032593-5c46-5424-857b-afc79d875654","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 64322coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64322coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a172a1db-fc13-53e0-b3c5-6cb52777847b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 643271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '643271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917722d0-65ef-52cd-8897-56972837248a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 64353coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64353coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6adde38c-8d97-5b64-9466-a1d4e898f7ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 64521411-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64521411-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22d5709f-4b0f-5fc0-8da1-3239d7a3fbb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 64533coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64533coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba72bb5b-200b-5ace-9120-8d56621734ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 645359ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '645359ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ead1b13-ba37-5050-af15-e4d2479a7cf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 646322-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '646322-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bdaef86-3254-5238-92bc-b919fc58104f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 647329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '647329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbceecb-1e18-5871-9d93-4c13d0daaa20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 647avrupabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '647avrupabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ff5cc4-685b-522a-9f4b-04e93619454c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 648204-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '648204-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7965cef-fa33-58a7-a4ed-5d3fdc515035","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 648358-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '648358-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfc9f49-2639-5cd4-a0ba-6827be4a2188","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 648723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '648723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8d79749-cf77-59ee-a5a7-1053a48d64f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 648927-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '648927-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6db5c711-96a4-5645-94f7-b34b7ac880d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 649321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '649321-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e172aa6-a08c-5bdb-a64e-17b0d51280ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 650910-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '650910-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab69f64-3477-58cb-9f7c-e713f81a6566","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 651592coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651592coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10fa1f0f-b252-5ba8-af31-4cd861b1024b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 651711-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651711-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe28cba-383c-5926-81e3-d47927e3a215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 651723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97225af0-2710-595a-bd2a-8359103e8f82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 651848-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '651848-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f1d8354-42c7-5095-91a6-68431efff07d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 652369-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '652369-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1f1c25-bb78-50b1-a43a-ab9eddac2042","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 652412-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '652412-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aace41ce-5def-5249-8388-9eb97ece6930","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 652712coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '652712coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca83c34-fec7-5da3-a28d-c22adab395bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 652812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '652812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf44454-b7a5-5a31-a267-22e0a65e8db8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 652slotbar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '652slotbar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f037f641-9c04-5667-b446-f835e0f7f9e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 653182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653182coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28adb213-fd67-5d1c-9d29-9406b621ea06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 653382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26cf4cd0-240a-5b32-9e74-21cad17fb20f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 653445-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653445-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a02ccbba-0ce4-57d4-be54-63c7ebd4ab14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 653789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fffe54c-e63f-515d-af72-f4b51427645a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 653875-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '653875-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3e9f6e-ac93-58a9-bd40-649abdd54348","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 65411-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65411-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--193c4449-fe90-5e19-bd56-59a745f59fa7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4910cb05-b095-5d90-9b3a-a1f74921ac77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 654882coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '654882coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7b3f09-5128-5bcc-9292-cb22d9ae5112","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 654932coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '654932coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eafbceb8-6cd7-55d4-9068-7a756115d972","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657324-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657324-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b520b101-fc0e-597b-a0c5-a5e7e0165640","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657324-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657324-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efb5fd3-f044-5a96-965e-1b57bfcfb855","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657633-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657633-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e9a737-0039-5b42-ac36-d5fe6c7b5cfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabdeca8-12b3-5607-9001-9f2b834950cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657897coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657897coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f619e91-7678-5513-a1a9-8fd64718cc41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 657986-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '657986-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc76969-98df-5a37-a922-3e4385ab7893","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 658145-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '658145-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbf39562-0cdc-5e7f-bf73-d36712050267","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6581505coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6581505coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a39dd914-3ce5-5040-a67a-e6285bbcc810","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 659295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '659295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f3890e4-d87e-5eaa-88ee-c47367df31a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 66001.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66001.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d080506-0b8d-5c5a-933e-77f3ddffcbc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 660566-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '660566-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1b0b3c-2809-5b62-9ec5-f74083ba9701","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 662993coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '662993coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bac7e53-d7a4-5de3-b912-bba72b57be22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 663484coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '663484coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6954a1de-017b-5911-866f-0495b7880176","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 665334-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '665334-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1188ac08-2c38-5576-a1a3-84976d306255","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 666gambit300.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666gambit300.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1a39ff-f252-5605-9853-6e1d56f062c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 666gambit900.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666gambit900.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e788cb-14b1-595b-be96-0b4fed4596bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 666xrpl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666xrpl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7970ccac-2a39-598d-a86b-c626870c63e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 667298-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '667298-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--819b709e-6961-5d5f-b0fc-c7d4839d8e1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 667334-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '667334-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f83d40-275f-511b-bff0-beb8091ae9da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 669982-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '669982-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41bf6b9d-a1ee-5de9-a31e-01129c33b2ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 66ae367661249581ba59a38e1a8925f6.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66ae367661249581ba59a38e1a8925f6.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3350eb-161e-58cd-ba7f-4d252b1c22da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 66ef84050555696fde4aba941b11d376.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66ef84050555696fde4aba941b11d376.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13eb283-ad59-5f2b-9bb3-8fe4f16689ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 671239-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '671239-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0232bc30-13bb-506b-bb97-cbf77abf72db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6719.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6719.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c545ab0f-dd3e-5f78-b1e0-144d4fbe3aa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 672169-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '672169-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6863357-45b1-58d4-8b34-7de5946d629a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 672873-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '672873-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b25546-98be-5a05-9194-e46a35df62b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 672trendbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '672trendbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3168bc-314b-519b-ba05-97d47a86a6bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6735-firstcitizens-member-auth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6735-firstcitizens-member-auth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1d3fc9-8d51-5a62-a375-1d0bc4510acb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 673626-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '673626-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae1bfeb-2270-515b-aeb1-1a7c2059cfc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 673982-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '673982-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b8a82b-957e-5ff8-97ab-3ee3cd847e0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 673992-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '673992-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--561a3a04-8086-5e1c-9bc1-5c1fb2013e91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 673trendbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '673trendbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f083361-758b-5172-b190-2addb5809f28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 674169-coinbase-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '674169-coinbase-support.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb14df6-5354-5dbe-b57f-be4874201093","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 674169-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '674169-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74549dc5-7937-5ed4-a4ee-5e244e44c41a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 674235-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '674235-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42278ca6-9d15-5992-b3ad-ee3b16b29873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 674552binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '674552binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f56817-22bf-5c78-98ce-67f7a52c2606","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 674632kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '674632kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bee717a-11c3-5ad5-822d-904d0844416c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 67550coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67550coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709da420-e831-531b-97be-008c53eab9d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 675538coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '675538coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1350d9c3-bbe6-53dd-9f6a-1fc25a186a23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6757472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6757472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa9590b-0761-598e-b6b2-6d09f3677dbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676382binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676382binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4508d2c-b912-5ffa-b2b1-231e39cf3795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676382coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676382coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99901651-9a5b-561f-891f-3c37f8d5aeb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6763bcoinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6763bcoinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a59d03f-bd86-50b4-a104-5d42cfbb26a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676935coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676935coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e0845f-87a2-5fac-9282-c776024b49ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676935google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676935google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d81b80-456b-50e1-b1a3-509a45abaabd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676935kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676935kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92d7cd1-55b3-58ca-a9ad-c1273dd32a20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676938coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676938coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba675d2-e7b8-529c-9f1d-6832720b97f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676938metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676938metamask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ed15f6-dd63-51ee-9cc0-76daee99c79d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 676938nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676938nexo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--012cea1e-3447-57ed-8911-896eaa931544","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 677betcups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '677betcups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84a8602-27ec-5a24-95dc-2441e635b30a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 678462coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '678462coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e6be34-fc3b-55bf-be0b-867acbe98eb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6785462-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6785462-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2bd9428-5f0d-5a73-9461-cd0a73bace56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6789452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6789452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32fd715-2c1f-55fb-ae86-2abd674447c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 679532coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '679532coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d24453a-1bbe-5260-b17a-4df954468ae3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 67moviestv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67moviestv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8569c4-0064-5cd7-9ea4-05411ef9f8e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68033-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68033-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ce4ecc-f09e-58a9-9ca3-1cf5013c69c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68095-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68095-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b665be-c597-58f9-8bcf-49d67167974b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 681305-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681305-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38346526-acc7-5f17-81ff-3382d9b006a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 681359coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681359coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a39994-9ef0-5559-82cb-c352bac3c243","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 681492-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681492-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df1b24f6-978d-58d0-873e-26a7af7f7d83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 681522-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681522-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104c27ad-b7a5-5fb9-a98a-78b8ea8db73a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 681931coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681931coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02948c8f-6e51-536a-a080-9a59790e845f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68203coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68203coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d84d69-8dca-5a8f-99e1-a989b51660d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6828843-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6828843-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45add3df-85c0-5a0a-8421-7c8cf5300aa9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 682910coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '682910coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3fd2f9-bf14-558e-848c-6f47c175f6b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 682951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '682951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c6d3b7-4e9b-57d1-aa5e-546c8f9a6208","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 682991-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '682991-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c927751c-7e1d-588c-8ccc-620aa648ccf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6829913-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6829913-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9443f218-4506-58e0-a008-a9cce6da1769","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 682992-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '682992-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc38183-1cee-5a3f-87e0-f90259ac5b60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 683323coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '683323coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f930e95-da0c-541b-b8e8-cb70341e5320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 683932-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '683932-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--175ac59a-057e-53d3-9bd2-7dbb6acc460a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 683973-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '683973-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836493fb-0118-5ee9-880e-b6d871c7d101","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68407-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68407-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2356de8c-071e-5ea9-9898-6f428dd4646b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 684346-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '684346-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0c5d60-2bdc-5480-87b9-05cb2140e852","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6843483-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6843483-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58268604-aba3-5716-92dd-dbfbf9808f56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 684493-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '684493-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74981ea-28d9-5665-a5be-b68c57cc1dac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 684924.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '684924.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f89551b-f5c9-5198-9163-6efde128709f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68498-truist-identityverif.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68498-truist-identityverif.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01598006-af70-5bdd-8c10-645f059dd6b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 686125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '686125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec7e4bfc-1cba-5205-a4f1-0961f0e685ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 687123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b9f9abf-c95e-50bd-a979-1a27ae4a3fe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6871711coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6871711coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da9acfe-24e3-5398-96b9-d95e739647e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 687283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f90d7474-25ed-5f9b-b112-deaba366f8c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 687456-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687456-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3543b57-1170-5a8c-b4c7-8ae72e19a782","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6883085-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6883085-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb664a8-4e9f-569a-977e-2b26d1c5f7d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6885833-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6885833-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a7fc68-44f6-56fe-a16d-bf37b45dd033","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68917-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68917-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c71a44-2bc9-5bc1-887f-09f31b33cc97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 689281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '689281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8aaed46-9a43-508c-af85-3b9c68156b94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 689282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '689282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3175edec-3671-5d43-9dea-b63fa93d3a7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 689380-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '689380-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9902778b-be75-58cd-a7d2-4746fdb7f780","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 689484-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '689484-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfb2279-7748-50d6-b2f6-bcef06d29c86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 689532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '689532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76450195-9441-592f-8b6e-443cb64f8238","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 68971-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68971-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335d0269-fa2c-530d-a6ab-9f29a1920f5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 690433-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '690433-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c103b4-34d1-5d17-a14a-219e22218303","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 691761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68412a21-977f-5b62-b314-13f80cf77280","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 691762-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691762-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ddaf744-2f2d-5be7-8bf1-f4d5bb57a463","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6918coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1724e75f-b571-5331-9eed-b99179ed8c22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 691942-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691942-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804f17c5-3f36-5aed-8e4f-e46f8d515c06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 692090-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692090-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6447c6e0-3cd8-57f2-a11b-c2de251bd49e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 692152-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692152-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701dfe52-52af-5959-bcae-1f7a4813212b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 692295.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692295.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2499a65-69eb-5ead-8ed5-9315fec7a2fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 692332-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692332-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94365d04-02c0-511f-9094-b44bb5016641","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 692814google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692814google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f79b2b7-92e5-53fc-bc53-82d4ae8dc943","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6929592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6929592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--551c5ea9-46a4-5bcf-82a5-ce3a130731bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6929942-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6929942-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b87eec3-effd-5f25-8a48-f292b7918559","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 69325923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69325923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5adc59fc-df5b-5ccc-be12-20a22ed5d891","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6935coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6935coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a54a338-7e5d-5a7b-9d2f-815981a7ffdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 69437-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69437-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b9cf50-edfb-518f-9f05-01b512f3853b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 695274coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '695274coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102ffa93-d4c3-5baf-b57f-b34b867ade46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 695638-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '695638-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29fb19a-30a0-5024-9922-cff4451ae3f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 696kingroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '696kingroyal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9924e1d9-688b-5223-b384-c47c586bfe30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 697053trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '697053trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2a4487-2401-51b8-9790-cadd98e0b2f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 69718.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69718.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1977f50d-c990-5963-b61a-bcb4ce933191","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 698447-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '698447-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69db9664-e7f1-54bb-8bb3-e4e00c1ed35b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 699184-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '699184-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3853ce-5e15-5d5b-a608-c1dae2a84a83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 699326coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '699326coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774cc3dd-b1d0-5da7-b577-e495a62db17e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6bf4d2da686fdda47851e62439577f83.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6bf4d2da686fdda47851e62439577f83.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66c242cf-a01b-5110-9566-e9f101b1a77a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6c78ijanyf0l.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c78ijanyf0l.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9916b6-f631-5497-a220-7baef6a271ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6292e9-73fe-5369-8962-9fafd90d4f91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6e472006c8ca62796ec6cca932fc8075.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6e472006c8ca62796ec6cca932fc8075.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bc7a4d-8ce6-5c06-bea3-093a737963df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6gc-notify-et-interac25-ca-pym.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6gc-notify-et-interac25-ca-pym.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4a4448-84fd-5234-9e2b-a1617aebc224","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6gc-notify-et-interac25-ca-pym.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6gc-notify-et-interac25-ca-pym.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16cb97c6-80c6-5259-a1ee-60258edd605f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6gwendolineavenue-bentleigh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6gwendolineavenue-bentleigh.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c431d7-2815-5c5d-bc00-af868a3f17c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6pills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6pills.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc8c2ac-4295-5ee4-b883-0d6ec0ffb4d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6pvc38y5izw3.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6pvc38y5izw3.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02600c28-ed5f-58b9-986d-afad72fd5742","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6rbcexpress-webapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6rbcexpress-webapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--febfb365-75cb-542d-97a9-de0369e41be7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6royalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6royalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f224d9ae-aff3-5640-a95d-88d9173b4840","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 6wr9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6wr9.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2453829-9bd7-57e0-b2eb-d89f472129aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7-bit-casino-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-bit-casino-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fa9a84-bc1f-5d9e-af96-c237f140bd59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7-orders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-orders.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf274850-0bf4-5bd8-8632-bf50d3651dc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7-seas-casino-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-seas-casino-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed76c491-f820-589e-95a6-b029d92fe02c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 701922coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '701922coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de273b8-ad43-5e7b-a43e-91ecec85f0b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 701990coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '701990coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d0827ef-b84f-5715-9072-f16e802d740a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 702383coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '702383coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7f5fca6-1dd4-5d74-85c6-70f34f48159f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 702740coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '702740coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a899ebd7-0b23-5a20-b6d0-19a83a312f2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 703838-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '703838-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca3d924-612f-520d-9694-616245f2064c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 703901coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '703901coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abd54fae-38b0-5a28-9f41-b8929832ab04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 70419-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70419-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ef7420-0aa3-582f-8c87-6898acc3e252","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 705321-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '705321-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1643d92-5b64-550d-9903-7e42a321de90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 705560-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '705560-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c324f07c-59db-54ba-a507-c5c2622d61bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 705896coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '705896coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0050f854-fd95-52a8-88be-e7e1766f8ba5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 707239coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '707239coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2771adf4-e6d0-5407-b363-cae2ff996654","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 708891-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '708891-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a3a2da-b6fc-5314-adc9-0098277dd084","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 71-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f563ce2-6305-518d-beb2-dd8e9a3cad02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 710482-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '710482-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cd10c1-1760-5683-8219-80275631c040","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 712382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3412dc6-1131-5efb-9f4c-ccb88b987795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 712438.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712438.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af4e37ea-fa8c-506f-867a-2d964d178744","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 712568-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712568-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce2e9b21-84cc-5c46-90f8-305df35241f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 715821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '715821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fca7e081-9e22-53a2-9bd7-e74cd0e4c6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 716marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '716marsbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31024446-5ad5-5821-9c16-d0d78eb5f13a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7171735-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7171735-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e39a4217-20c8-5136-a978-8166876ff786","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 717241coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '717241coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3188fd81-5f00-57e5-88e7-e7e36b16b6af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7173072-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7173072-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d561e9-7900-57e8-a306-74ea857d0cab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 717444crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '717444crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe189ec-f151-5d2e-9598-b685ec9e1c6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 718232coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '718232coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0cfc9f-65a9-5a79-88d1-1df6781226f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7193usbankmemberauth.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7193usbankmemberauth.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9b7db2-97e5-5f98-8542-7114b5a20afd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 719624coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '719624coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be41acf4-4ca8-5913-aab9-b70ba5c35a4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 719842-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '719842-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2ba465-d306-5ab7-8ba6-e2e7d210d030","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 720338-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '720338-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aed685c7-7979-5227-9d33-53cba4538f9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7204-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7204-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6d4e01-6f97-5838-a760-8cf2e63658c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 721464-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '721464-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b799bc5-b825-5e11-8f71-ff576799b8c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 721861-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '721861-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed733423-ce7e-589a-b33c-9deae4015f7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 721987coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '721987coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c327488f-beb6-5fc7-b810-91c07826251e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7226119-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7226119-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f84ccf3-6ea8-517d-8de8-b8528154a980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72313b-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72313b-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a91955-e334-514d-a9bb-41d0d4035842","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72331-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72331-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fdd2ed5-2cdd-56cd-b815-d16ac6f8b549","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7234811-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7234811-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30818bdb-af50-5180-8585-787539b0ff55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 723542coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '723542coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6a7000-1ee7-5bc2-92f2-51da399f4a97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 723587coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '723587coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c8d104-a3fd-5340-a89a-093a82e5a922","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7236coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7236coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd5cbdf9-47a7-55e2-a068-0f99fd635f9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 723812-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '723812-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dca5c5b-ea7a-51e0-ae40-9c9b29bbd3e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 723892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '723892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4704b90-0894-58c5-aaec-d48568f2e8ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 724125coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '724125coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe20e98d-6c9c-5d21-b9d1-d1b66b062b88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72415-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72415-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6645c69c-a562-5e7c-99cd-e25b97b76f26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 724169-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '724169-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--106587e5-8f34-54cd-824d-0c73d83d5c1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 725163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '725163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47d591b5-2f75-5da3-90ae-1c69e3b75d51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 725236coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '725236coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7cc5f53-1ba9-5c88-af28-a2407622ac84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 725816-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '725816-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5e9bb7-5016-5f80-a022-20a4d430a6bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 726173-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726173-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2407cd81-a881-5346-a417-4738e13d68ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72634coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72634coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82bfa331-30e3-5f07-8b52-e9b195541dc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 726352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7ee432-aa06-5808-89e7-60d803393847","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 726394-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726394-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4773e1c-ec08-5b79-8fc6-1b8fd1f89b15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 726698-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726698-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156ba08b-c10a-59d6-bf2f-1263aa6eeeb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 726723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc72516-140c-58d7-84c2-b06e587afeaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72753-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72753-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ef41fe-1e65-59dd-96dd-6b502db45156","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 727kulisbett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '727kulisbett.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baabff83-8513-59f9-8e14-306e4870792c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb4d09e-698c-5a32-a39b-0944812e58e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72811coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72811coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36fcc410-4987-5512-8596-1f7cab0c939e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 728178-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '728178-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a12b31-6438-53ef-8b18-b1b24adb1dae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7281923-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7281923-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35a2cd89-4f65-51b9-a64b-6ed9ce29998c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72831coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf7697ba-2c25-5ba0-85e5-5e91f0516283","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7283843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7283843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c7e0c18-483f-5ec2-a060-3d23d315a8bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 728425-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '728425-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9409c30-868a-544a-8824-c720e47ee980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7284631-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7284631-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb5e2473-4bc9-518a-bf65-b0dd47321ac6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7284913-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7284913-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f94161-3fe7-5165-8bf5-2fe2eb79fa21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72850google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72850google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd64d224-75b2-5df8-a64d-84339e999d2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72851google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72851google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fad69eb5-7706-550e-a41a-e779276d7d9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 72931-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72931-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa30a5a-6ba4-5206-a68b-f3b4112e4aaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 730254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '730254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcc1488-6a7a-5b35-9215-5961d9f8d47e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 731662robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '731662robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019f7ec-306b-51b8-84ca-d8936f655d1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 732673coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '732673coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5230dfb-6ec4-58b4-b6e9-5130a56104ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 732673kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '732673kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ffccad-292e-5b7e-a9d6-9ea1b2efd128","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7327158-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7327158-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d53cba-182f-5bc3-972b-3ac850fa99de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 732831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '732831coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26986010-e807-5f00-be82-057a32b6251b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 734281-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '734281-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecaccdf-3f1c-5d83-b23d-fc4a645526b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 734684-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '734684-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--148eb5f5-0d2a-5dcb-88ec-2ab4a2c83075","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 734983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '734983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17127db-0aa1-5da6-a09f-6877afab109b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 735783coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '735783coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ffb60b-d2f2-51cc-b871-a950583d1e10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 736189-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736189-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6baa29e2-8df1-5955-9fbb-552cfd8adf41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 736281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f04798d-dd84-538d-a6b7-ac6f843a787d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 736371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4cbb696-ac4b-5fdb-92b0-e7858f0a98df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 737126coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '737126coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6323ba35-c99c-573b-86b5-f5b958fb1e50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 738119-wellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '738119-wellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a874cc88-7c4b-5b62-8646-d656a2316ff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 738288coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '738288coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec44e9c-dbba-526f-9742-26552a990e64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 73829-coinbase-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73829-coinbase-auth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eef79ef-0b72-59f5-9449-b2f15926b1ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 738402coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '738402coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9120ae-0d50-5d4a-9752-f549f0840985","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 738429-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '738429-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c70a421-1b74-5079-bf87-9f8b5ef14386","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 73872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73872-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2936ec6e-74af-5e39-94b2-ff4d0967c4d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 739431-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '739431-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff8db26-5d5b-5990-8240-964fda490048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 739472-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '739472-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29549d05-4dde-5aa6-9d6b-40aeeccbba18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 739826-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '739826-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476e3248-4f85-5e84-9a5a-9f38ba56c040","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 740273coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '740273coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c6757d-1433-59af-be16-fc90e35181f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 741159coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741159coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1871ca11-5745-5a7b-afa3-5dc2132b85c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 741351coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741351coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849209d2-3d1f-55b3-8d5e-bf916dcd57bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 741451coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741451coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f72832-691d-5ab8-b8d9-ba38f6e23f50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 741988-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741988-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3012ac39-20e3-5436-8443-cf1aeefe89cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 741991-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741991-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f28b9fd-86e0-5915-885a-a92a0158120c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 742182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '742182coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b376940-0b92-5709-974a-1f754cc2b81c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 742515-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '742515-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3d9dff8-3078-51aa-84e9-2531d4f80283","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743112-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743112-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e969fe3a-c59a-5c22-89d5-4c70ba849eda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743152-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743152-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15f6b42-e790-5cbd-a856-5105724f39ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743692-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743692-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f433e4-313a-5fa1-b96c-adc5f236a22d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743782-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743782-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4982be77-3124-5956-9bca-2f7c3e691ae3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743821coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743821coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d60bd9-4047-5ef0-a092-ba3ef79fc1dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 743823-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743823-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49944f22-3953-51a5-8731-f0419379267d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74511-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74511-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0c5137-0fe4-53de-8fed-47957cb98b5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74511-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74511-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85eb307e-1131-5910-bd6c-c8d475ebc236","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745364t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745364t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42205abd-6d91-5c78-bf46-11575b48770f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0ddce2-606b-5602-ad6a-823865758214","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745583-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745583-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86cd50a-eefb-5053-9b0c-ec59438bb4bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745612-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745612-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aaed6d7-9daf-5ad8-a44f-68d5ef90247e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745834-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745834-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee299374-6e55-51fb-96c3-b8322e7ee2e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745834coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745834coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312be0b9-ab22-54ae-9d34-2c66d07c7784","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7459821-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7459821-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d31843-c574-583a-ae55-06846f08cde4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 745odeonbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '745odeonbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93c268d-2914-5426-8c97-9ec752c3fb98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74629185-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74629185-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00963036-6be2-5c02-aeb1-8215d4f5372a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 746329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '746329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c189569-f6a0-5008-bb8c-eea5dd6c72ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 746373coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '746373coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902f6581-d1ff-521a-a2a4-e728e1f14d80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 746382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '746382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca7ae77-54c7-5a18-b93e-dfa8caab19e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74678coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74678coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ede5d9-f128-59b8-aa49-29ab358656bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74683-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74683-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--467f2e45-8fa2-5b5d-a2cd-6a02a709bfa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7468569-533.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7468569-533.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc42119d-ae9b-588c-989f-1705ac43a47e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 747289-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '747289-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0161768-5c15-529e-aece-328453c8ac2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 747livewinph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '747livewinph.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c44493e0-6b84-5f5f-af7f-17980f5920bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 748302coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '748302coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6939bce-eaba-5463-b296-6c595cd3db9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 748329coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '748329coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--803cdee7-aad4-5a69-b0ad-d4bf4fc869ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 748395-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '748395-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba8ed955-aec2-5ad7-9f73-2b92eeaa60c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 74844-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74844-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5086166-efb6-5e60-8964-dd4725335886","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 748629coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '748629coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08fe4040-7a22-5a55-8af9-3c4cf5fb3c2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 749153-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749153-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68aa7860-8704-5b2d-8c47-91644951dffd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 749264-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749264-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c0928-6469-588d-93e0-55ab425979df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7492862coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7492862coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da250c24-f50a-5de2-9706-9104ffe3d014","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 749503kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749503kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a36ea2e-d8c0-519a-a6bb-3537a2d56388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 750royalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '750royalbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe78e863-f996-5a19-a54d-96bfe5effe65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 751362-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '751362-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5896db8a-7323-5024-ae84-3c3185dc26d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 751532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '751532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba3c511-5120-5ef2-b7a7-2e10dcc13547","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 752642-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '752642-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9ad68d-d3fe-5ec4-b692-b72e975c4e9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 752986-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '752986-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--042e9dd7-ba3b-5c9e-a512-b8019cd1ba18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 753421-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '753421-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94400a3f-5a43-5a08-bed0-a9f89c9f8972","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 753423-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '753423-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc06192-dd08-5876-aac0-26c078627f85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 753812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '753812-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec02228d-c949-5ab3-a3ed-269479376ef0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 753pokerklas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '753pokerklas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03fed82-b5aa-527a-9adc-653a0d1bf213","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 756126-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '756126-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39cd896f-e5e0-5b30-bb62-f0e41da894f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 756162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '756162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a90b6c-b25c-5736-a21a-1c2d527ad761","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 756251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '756251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ac1ed99-537b-569e-8a93-e2f28647dfdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 75709-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75709-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9637cd53-7c7a-5e89-9a5b-f0b8545e2103","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 757136-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '757136-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba44da8-3a69-5a24-88ee-ca30f9aee7f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 757986-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '757986-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a8e6b8-5b3a-59d3-ac4a-adc5dc569c8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 75814coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75814coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--122b3540-55fb-5526-b7d5-c98e3261d941","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 758192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '758192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21a0d596-a01b-5f52-ae7f-45c48f013bac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 758216-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '758216-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f468e12-956e-5f7c-9021-e11119d11e6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7584734-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7584734-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e69570f-e12d-501c-984f-378349ed7b7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 758982coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '758982coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbef0503-e265-585d-af49-ac89b1d295c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 759163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '759163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0ee819-fe03-5f7f-bdcc-1879668de281","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 759436-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '759436-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f1a6ec-5238-5ee0-b4d6-5807dc2607ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 759836-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '759836-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94236bb5-1a2c-582b-8c1d-8ab92c0ee769","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 760185coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '760185coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dafa64d-4a5b-5be1-ae57-60a3983c766a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 760197coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '760197coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfcb6b6-6977-5c85-9705-cc8aef8f2a62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 760283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '760283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5cc39c-872c-562b-a996-d0fc5c45baeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7612379-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7612379-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca9af6a1-4e7c-54cf-a842-52a2104b3118","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762137-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762137-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4e4887-0e57-5e31-a676-7d0690590a17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762146t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762146t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db27d53-a8af-5836-a29c-12d651947866","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762218-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762218-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--442d6541-0ada-53a0-86b0-236a5b374271","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762359-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762359-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8998d6-9526-59de-be1a-6b9df985db0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762361-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762361-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db3da636-06c6-52ca-88ff-448951b63fd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762498-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762498-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f63f42-2d70-5443-9498-085290480ac4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762524coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762524coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abd4a63-4f4d-5e09-ad24-9f0d0a008d3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762559-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762559-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f746bc2-c1fb-54c2-90ec-9b2535236657","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762659-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762659-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0357b9fa-d38c-54af-81bc-bfde26c1187e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762841-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762841-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa8c1ca-2f14-5241-bd76-19e0956adba2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762847kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762847kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--376bd444-9615-56d5-8e6a-91d1922b47be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6faf482-d177-5c01-bf46-590d78c4ba5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 762959-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762959-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfedc71b-706f-5bf2-b765-254b9b490234","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 76372coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76372coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b0e75b-40c1-57da-b8ee-ed9d3b788685","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764193-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764193-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d869bebb-b630-5f60-8fb1-533d79d15504","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764201-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764201-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da5cca2-5792-5d83-bebd-a08446ec1fde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764326coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764326coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae968fbe-4a0e-5768-b93b-63750ee9c040","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7643951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7643951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db47f6b0-6205-5e3e-bc2a-a3932dc1dcad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764398coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764398coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562d3218-d072-5577-b652-96057ce7326d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 76467b-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76467b-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a7e14f5-ebe9-5eeb-941e-f997026a5320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764809coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764809coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7055177f-f2c2-510d-b457-e5ad36433fbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 76492coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76492coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3d893a-eab5-5949-a7b0-cccd850ce378","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 764951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '764951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c16674-5fd2-5740-832f-6557ef5dc11c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7649952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7649952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb255c28-9d87-5957-bfc0-0dfd19a3bdab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 765121coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '765121coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76e6e9f2-44fe-5f2d-8aba-d063abbe2c3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 76543-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76543-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7521c6-e021-5b35-8864-7a5c5649a539","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7654783-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7654783-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c7708c-5677-553e-82b8-da1688d93ab2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7655holiganbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7655holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d37a3bc-cdac-50b8-87b8-291b04f1c5f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 765998coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '765998coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62aaeada-7b10-5850-8158-c83e79e5f440","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 767745-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '767745-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63524833-1126-5dac-8d8c-86df5f846e11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 767808-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '767808-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1e4b32-cb2a-521f-8af0-42c9da804341","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 768590-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '768590-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d34eee-38fe-5ed5-acf7-c00d1988eac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b087095-5eab-5da2-8416-38a0aaa17cb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7700betbrazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7700betbrazil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd44c564-3071-5980-997f-f4dc13343231","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7702-ens.domains","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7702-ens.domains']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702c5b48-cfa8-5702-9802-ca78fc321341","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7718991-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7718991-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--454acd6f-391d-5012-bb2f-48c0094db58c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 772813-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '772813-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cba6615-7619-5caf-910b-b343b62f53f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 772952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '772952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d517e6ff-0672-515c-ba40-50c4c5306f67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 773001coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773001coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46850bbb-431b-5609-9661-529c5c88b701","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 773124coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773124coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc48377d-c6d3-5274-b03a-6a6501217967","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77325-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77325-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe3ea46-02bc-5ca0-a12b-be0945207321","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7733111.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7733111.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d8b536-b5c8-5819-894b-8a37834e2a62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 773908-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773908-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49164f23-e0bb-5249-b935-5e3636077bd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 773918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773918coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ed1191-98c9-567e-a1d2-4f0ff7117f17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 773betmoon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773betmoon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0466a2c4-4211-527b-9b84-c566848d4fa6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777-casino.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777-casino.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dd18a84-36cc-5f4f-96fc-9ce59fac3b9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777-casino777-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777-casino777-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96602dc-fa74-5a98-be21-7c33ab2683ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777-documents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777-documents.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632d80b0-aeb1-537d-8f61-be20dbaccdf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777419-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777419-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a86a02e-1212-5a7e-9270-df9b07756a3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777casinos-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777casinos-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a934e4-32b2-52c7-8882-eb236ea9ba67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777casinovipmx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777casinovipmx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0addca-d07d-5e05-96a5-8fc3c72850a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777mln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777mln.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f077badc-a318-5d3d-8669-bfbbf918c389","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 777seven.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777seven.casino']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6683ecf-5108-56a9-bbe7-e97f7f9acab1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77929939e451ea105ac6c0255520db4f.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77929939e451ea105ac6c0255520db4f.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35f8196-3af5-5d99-8da5-7b2cf3978611","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77cxmai3zm.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77cxmai3zm.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecdda80-74b1-515d-a262-6884af61aade","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77jlphilippines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77jlphilippines.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f6881f-7de5-5505-a62d-07e0527e967c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77om4-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77om4-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c53c800-33f5-503f-a1df-5977cd4078ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 77pharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77pharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2f0c9a-a21b-5186-a4e3-a3984c881f5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 780070-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780070-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8dfac3f-4225-5f71-9c5e-361be82c7646","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 780236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbd5c2c-281e-5bda-bb7c-f1b144fa0cd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 780414-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780414-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902fbdb1-a5f6-5709-a267-792ae2e353c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 780452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32800cd9-47aa-5a02-abf0-9c1cf26bc356","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 781234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '781234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9e7dc6-9160-5578-b4c9-af08f6512757","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 781236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '781236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e8c475-a934-5479-8ade-bddf3541327b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78201-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78201-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf9f13e-4bc0-5ce3-8f95-87ff350d0ab1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 782339-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '782339-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91257b0c-803d-5436-b039-0e8f46aac631","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07abf876-29f9-5688-bdd6-e020075f6e6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78261gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78261gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c745e372-fd38-51c4-97bc-a5c4f21cb415","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 782971-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '782971-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b512af9-0c3e-545d-9d7c-1d6ced0a39bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78298-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78298-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--819bc227-47cd-5e2e-ba76-95cfb1313445","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 782984-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '782984-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--497bced2-57e1-5fa6-acc4-3ad518ddd310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78340-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78340-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eff6b9ba-9f1a-520e-a645-19a38794aa99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 783450-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '783450-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db2f379-d061-534e-97c1-443d665b1a58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 783452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '783452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee744ad-6115-520a-83be-e0b29c1aa828","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 783542-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '783542-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fb82d5-c6cb-5bca-bc35-ec4e8eaeb2fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 783915-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '783915-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5237ba3b-d25e-5d4a-8d95-a97ffbaadbcb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 784029-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784029-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa8e2ac-6a36-523d-9864-44ef5c03aed6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 784219-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784219-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b7ee4c9-c8dd-548c-a290-6f1136854d92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 784328-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784328-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3db4e6-f628-5518-8c3d-3cfb997bb626","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 784890a6865f.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784890a6865f.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa32d3a-2804-5a12-9c26-3f08ed7a0311","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 784915-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784915-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d196cbaf-2d32-5c43-83bc-8bf3923ad4d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78493-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78493-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14069ae-6d19-5ecc-a418-3c0e86214f90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 785831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '785831coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f27be6d-3af3-5b05-b42c-c12b700c8968","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 785976-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '785976-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6f1fb8-a04a-5f73-bf62-83da0593b1dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 786224-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '786224-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01cc4803-a247-5bac-ba87-41f39203675c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 786916-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '786916-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b0dbf0-9532-5f3d-98ed-0f2b5037ac0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 787749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '787749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5810442a-7f5f-58c3-836f-450e0e5d62aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 788176-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '788176-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff33bfbe-be98-5cfc-ac03-9fc36233f38f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 788555.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '788555.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6034e51-2b61-53e5-9434-4677409cc82c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 78888.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78888.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44a16e6-87f5-58de-bae0-7c78a1d87775","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789012-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789012-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c770181c-565c-5509-9cb7-5a074febfb0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789112coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789112coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69e20610-8a05-5eda-8f31-97b9464dfacd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2281bf34-2530-55d3-acd1-a9a1ddcb0ef8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789223icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789223icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bcc514-34ba-5ca4-a8e3-1bc1758a3e9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7892310.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7892310.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcfb40a0-467c-5058-9944-24bb3a59c50d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789453-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789453-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c889060a-e319-5ad2-b311-2dbe1d297298","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789564-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789564-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53114813-eddc-570d-a855-27485774782f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789betkorea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789betkorea.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a29082-2056-5a3f-8d28-5742d4c39111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 789tayaphilippines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789tayaphilippines.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--958ab828-0ccf-5e0c-bcdc-6331d8d5848c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 790493-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '790493-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f944a1-71d3-594d-8683-43790d66708a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 791550coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '791550coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401c6f39-9a4c-5cf1-8a16-538f6f0a01f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 792287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '792287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26415955-51a1-57ee-a121-c2a253dc0908","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 792833coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '792833coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4735623-4bd1-54ae-91d2-2988848ad9d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 792869-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '792869-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71914712-673b-518c-808d-a2e0d4c60a37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 79351-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79351-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41cb9306-9df4-5f3b-86c6-dacc459b315c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 793526-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '793526-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b457845c-2f79-57b0-ad5d-ef8842e104a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 793526-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '793526-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b45ef635-957e-5fe5-9e62-3a989383044c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 793771coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '793771coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ff1ca5-c797-51a6-b1a9-561fdb0d0f0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 793862-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '793862-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b58b786-c890-59f8-a6d4-1402bce643d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 795020-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '795020-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eba04e8-b338-5780-9469-b2ebde389233","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7965154coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7965154coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a50bb0-40af-5047-9edb-34f7aeda7334","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 797roketbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '797roketbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d72023a-26d2-5464-9955-4cc5ce4fb9af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 799600-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '799600-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ec751e-9f9a-593d-ab14-048818d1a3c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 79xmz3lmss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79xmz3lmss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2400f145-7bc1-5aa9-92af-f43c43953a25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7bets-sweden.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bets-sweden.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd60667-94d9-5768-bc8b-157c00d763fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7bit-casinoss-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bit-casinoss-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--415a3e84-4066-5c9d-b316-8df8bf742a7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7bitcasinos-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bitcasinos-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd27cf94-ea27-524e-88c1-b31b398c1e32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7fa40324dd39cdc245f44ca1119d7f33.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7fa40324dd39cdc245f44ca1119d7f33.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9b078e-2228-5a11-b0d4-8d85346dd396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7fbgvw.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7fbgvw.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc51168b-9db9-5a46-ba7e-9e7b1a6ca190","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7gcp6bd48fq.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gcp6bd48fq.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00ecf5d6-76b1-579e-8752-5cafae4bc36c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7jj34.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7jj34.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d560485f-7307-581e-a7f1-e36ffe285d2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7signs-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7signs-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb12363-5a7d-5864-91c3-28617d0e31a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7slots-casino-tr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7slots-casino-tr.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--035176c1-c602-5f61-8b24-ea847e39ba3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7slotsgiris.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7slotsgiris.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19f42f7-09bd-5fa6-ab2f-b8f5477de05c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7slotsgiris2.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7slotsgiris2.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffc45e4-ffe6-5b8c-8ffe-16ebb5703453","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7slotsgiris3.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7slotsgiris3.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b6932c-16a7-5740-88ea-1c30d91cbb91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7steroids.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7steroids.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cef36e7-299a-51d1-94b1-283530eba088","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7tepees.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7tepees.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64511a2c-f52c-5f25-9c1d-54f7f03804ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7u78hqmint3ohvi.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7u78hqmint3ohvi.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d7c284-9e60-5b2b-9cb3-72afa1e3ba69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7usdt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7usdt.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--868efe28-e3e3-53d4-9d68-2b6293d34364","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 7yfb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7yfb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3728cfdb-692f-50ce-8df4-cabf6f53da25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 800-865-4160.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '800-865-4160.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed913520-d2b8-58ea-82ba-8137b25dcb3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 800-929-7149.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '800-929-7149.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65cfc67-adcf-5000-bdbe-725fd746b736","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 800-chase-identityverif.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '800-chase-identityverif.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d0b21f-327e-5e4b-8740-827c7321a8c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 801123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '801123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f27d89b4-a419-5187-b788-117480dc8524","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 801842kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '801842kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--780f1c8d-1d96-5b5c-846b-13c2d5468ed5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 802353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '802353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc8254e-240c-5128-8741-bdf7e66ba0c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 802554coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '802554coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82104322-edbb-56ca-843c-73035e6c3721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 803318coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '803318coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfa8bb1-0d39-56f0-85e6-4474c392d7e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 803424coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '803424coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f075ab92-09c9-5f50-b66f-a9c2a867412c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 804194coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '804194coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d209920-ba63-59a3-b45f-154e23b07cb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 805203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '805203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a99ec7-dd2f-527c-9f3d-043caf72251a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 806744-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '806744-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9f7c1c2-41da-5ae2-a8a9-dfb2016d0af7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 806858-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '806858-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c394b7-ef33-5963-b751-3051536f19ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8068702-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8068702-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26add467-5b58-5fb5-a218-1dfac2d29b9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 807536.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '807536.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845d2810-2102-5b3a-ba2c-74deedd421cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8078-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8078-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0432bb-bbb5-51f6-85cd-06b5e826275e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 807934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '807934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3a7a7b-08f1-54e4-842e-9770316b3dea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 808908-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '808908-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e184ad-1e8d-5384-9995-c9ebc6be1c2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 80908-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80908-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10801ebd-8405-5e8b-ac3d-c9e4ff6ecd5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 809580-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '809580-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c453a3-aeee-561b-89f1-0860f1569c87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 80981coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80981coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acb7bea2-445b-50a2-ad34-95859d99be38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8101033-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8101033-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c81ccc99-e96f-587f-b9c3-8f659fdeaccf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 810242.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '810242.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf820e42-6d5c-5672-9298-ba70f1cdc29b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 81025coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81025coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa22d82c-11e3-51e0-8ea6-c8859386cb28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 810285.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '810285.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec6cdc3-616c-5d94-b2aa-a21dc310930b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 810474-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '810474-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a362dc3-df07-56d2-b79c-efc94bb46493","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 810481coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '810481coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac898673-cf58-5000-b686-1d547e0bf97d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 810919-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '810919-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4eb0d7-8982-51e2-81c6-3dc387ef64ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 811267-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '811267-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcb2aba-c1e1-5536-85fe-29df39b1e4d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 811289coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '811289coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e8cf0d-cf54-5fbf-b3b6-506801986e76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 811426-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '811426-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03aa66f8-d510-5807-b617-3332ddbff2db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 811901-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '811901-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd605c37-b31a-5f30-a883-75a16778d928","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 812230-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812230-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c211df2-a641-56fd-bde2-d20d4b71a4c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 812452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72721095-9a2e-5623-9770-0c28488ce31d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8127392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8127392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ec7833-a240-5e2c-b7ff-b9b798d95b1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 812878-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812878-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d7abac-0768-58ec-b24d-166e27ea7b86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 812pulibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812pulibet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa38e36-af82-51ff-a27a-1be6872bedb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 813417coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '813417coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c097eeb4-8846-5d1e-8083-9c70a042a47a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 81382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81382-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be92347d-ca29-5c07-b054-b7bc7f3c1d37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 81392-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81392-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418e1587-ea7c-542f-aaea-dbf4d106c703","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 813926-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '813926-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edba62ee-c987-5d6f-8571-b62a6b685d9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 814274coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '814274coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66110d19-54ff-5a11-9714-e9bd703dfdb5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 814426-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '814426-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7ad042-a590-5ab2-99ef-40a6434b43b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 814524coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '814524coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf49e08-778c-5ed7-8454-54317fdc0964","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 814723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '814723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc38d7c2-24d9-550b-b9f7-6e4f517cb9c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 814927t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '814927t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1325bfab-6559-5145-a7fa-4f01c48bd8bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 815246-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '815246-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7482c29e-dfea-511b-a81d-86db014c8479","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 815497t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '815497t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--201b380e-2609-5af4-ad33-84ad093507e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d95fa9-9ff3-543a-ae25-601505892a1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-coinbasehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-coinbasehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b620f0-9fb6-57fb-b40a-75fd9d753ede","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f9b1f10-29be-5c7b-9b3c-5de66a3fd031","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54546c62-49c2-5506-9157-68718762700b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb7eaeb-f604-5860-9fe7-ebaae26d1703","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0a1464-d8d6-5173-910c-c643e05921f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-swissquote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-swissquote.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5b0ff6-2b99-5e4b-9a97-dd3cedc139dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39631029-2b71-5d73-9d5f-01de46f6d0c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817034kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817034kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92d947c-6451-5b1d-b3fe-707538078f93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8171922-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8171922-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd20a48-2ad2-5ed2-a329-a0d613ebe4d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda28a3e-6948-5e16-b64a-da4b26e7866d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817214coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817214coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e00a11-a574-58e8-b5b2-7073f598c6b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817234coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817234coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee5c925-0399-5d61-80e7-3e560bfdde83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8172371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8172371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b497b364-bd0a-5d0e-b123-fa78935f825d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817292coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817292coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28a4b9e-d7bf-5bca-a50d-8e5b8be65983","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817342-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817342-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd5161b-4d44-5f9e-83b1-02a87a3d204d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817342-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817342-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3e74f2-e30e-5901-81c4-ec38f3aa0a6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817401-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817401-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db6609e-9e48-52bc-9e27-8e4c8cdee9fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817590coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817590coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d87642-8c42-5aac-9d1a-a3b1ff245723","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8177191-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8177191-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93cff6bf-259e-5895-a9e3-cc4af427d0ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 817983-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817983-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e233441d-320a-5a7e-9924-bf6bffc8e7e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 818271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '818271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a66dc75-fe85-536e-b704-edb40201654c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 818521-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '818521-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdcf4240-5456-5577-8fd0-3aa590942b31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819011coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819011coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6722a8-8fff-52e8-a5eb-0b0de5e345d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819052-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819052-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--346f0ca5-a738-522b-9239-689ad6c626d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819121-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819121-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df9860f4-e325-5f26-9e74-6c9cb78ee875","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224ff30d-bcc7-51d1-b8ec-960587bec9b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 81923coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81923coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836d3ab8-5280-5cb3-a370-4df1c40cb89d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8751d28d-d65a-51fe-aab9-8126386dd391","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819524coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819524coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bc4816-812e-548a-ae79-fde8e13e4be7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819746t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819746t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df6604b-3f6b-508c-a8ce-2259686403db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 819832coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819832coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec60fe7-a767-5038-bf70-30d586b0d4e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82019-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82019-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--536ad59b-51f7-5a15-903f-55cca27ab409","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82023-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82023-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda8d8aa-4aa7-5649-9f51-1225ba64091b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 820485t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '820485t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ee43e1-d13f-559e-81a2-11454fbbad5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82091google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82091google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2613fce-3848-52aa-b2e8-c68fb7ce0cc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 820931-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '820931-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5364d4-bf57-5319-b014-db23cf7890b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821082-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821082-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e17eda2-4202-56f8-b774-494563dd0d2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82109-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82109-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184c96eb-50fb-563b-9d02-7e68c02f9a14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82119coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82119coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac88401e-a4d7-57f9-bca4-98601c0a6f0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821479t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821479t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac492d0-c99f-5b20-8f01-893914d052f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821485-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821485-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dab4ae-b82f-5586-8cfa-169f0541d9b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821524-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821524-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024a68e6-2885-5cdd-a4d9-654fae8ecdff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8215grandpashabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8215grandpashabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c124e2-076a-5dd9-ade1-a39f1f2db651","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e63fe1-d831-5302-b369-4c81da90f04e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821904t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821904t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1adf892-0f49-5085-b2e0-332d52187ff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 821972coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '821972coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7410e2c-e97f-5ea0-9933-749d6317908b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 822451coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '822451coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47063ac1-4e99-507d-bda2-44ddb8a00dde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 822743t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '822743t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b5da9c-c296-5525-89e8-b7e949a04b4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82274t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82274t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e09b40f-26a9-5765-b315-6bbf985cf5b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823112coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823112coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660b28ca-1c39-5751-b850-f78662345d8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823145coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823145coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41dc89b-a723-56ff-9e00-6d04dadde29f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823317coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823317coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08def5e-d77c-5c98-9688-56e089c4cab4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82344-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82344-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--020774be-5cfd-56e1-b1fa-438caf31d954","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823497-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823497-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db23eb58-384f-52ac-b14d-8caa50cfdd06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823612-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823612-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcdf640-1cc1-5264-b0b5-2294e42193e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823639-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823639-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d518dae-feb3-53c7-8492-9f0596f088ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823640-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823640-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ef0d8a-a790-5784-9137-e66a0e368c38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823711coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823711coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec75cbc5-796b-5a74-b825-ec159073b018","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823737-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823737-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60add98f-20fe-5091-b7ef-2e75a40392dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 823759coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823759coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72b80336-b51c-5abc-acec-a03dd9eb71d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 824139-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '824139-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db01dfcc-9723-58c9-bea5-1d25c512232d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 824346-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '824346-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172da974-05db-572d-b8aa-2018a144b15c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82462-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82462-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f798db4-ac6e-5046-85ac-7c568988943f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8251749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8251749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a8b955f-755b-557a-be32-76d1985e1713","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 826971-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '826971-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--384af73b-33f9-5409-88b2-7c2a80cc061a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827163coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827163coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74f3c6d-8e23-52c9-ae94-168efd994b3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827192coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ada07b-cf4f-568b-a176-083e5efa59d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82721-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82721-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--671a7c6b-3fae-5550-a701-7109ed8691a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb99652-d5b7-5714-9375-0ea50f4be19a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82738-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82738-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7728e5e6-e6e8-5895-b1c8-d241899aa716","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827415-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827415-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66646748-983e-5f5e-9f58-7d33264e6f55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827491coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827491coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7f38d6-600c-5700-81ac-f8ee980202c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827592coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827592coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e19683-0200-5034-be8e-bc7eb86983d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827617t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827617t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d957de-9202-5f83-8813-4a3911b31dbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827692-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827692-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a284157d-c6bc-5010-b552-c8699480bc1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 827925-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '827925-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4635226-8f9e-5f2b-95f4-a06d0a003544","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 828013coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828013coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f490cea-e261-5fff-a2a5-8f17583089bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 828582-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828582-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce14b8d-91d3-51ac-93de-32d56c30dd37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 828622-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828622-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0fde11f-3abb-5df7-a2bb-8eab1164199a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 828912-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828912-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6be8043-fffe-5a16-b55f-d93775a29f4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 829029-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829029-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9cd680-b320-50bb-82d7-2110e0ca7f66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 829332-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829332-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56afd7e1-5895-558c-b170-9070af19c5cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 829353-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829353-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6042212e-cbf8-5be6-8ad6-b71a3840d532","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 82938a.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82938a.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c91111-4af0-5cfa-b064-9f741ad9cb2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 830125coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830125coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1b5705-1320-5ed2-a6d8-beb25553b3a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 830613-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830613-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66e4031-bd54-54c9-8741-c8e1b8cd5d30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 830atlasbett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830atlasbett.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b55918ef-c87e-5ec9-ac3d-b615b7ec7b6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 830lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae126ae-1ea2-5a6e-82c2-2ed23ae0d135","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 831474-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '831474-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed71d48-750f-5947-88e0-4c823fd91869","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8315479-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8315479-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b513c705-8eb4-52b7-bbc9-592b0423c153","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 83185b783fa469a44e4e6340baf043a3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83185b783fa469a44e4e6340baf043a3.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78288700-045c-5bb5-8233-c6d170e45502","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8319491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8319491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a0c783-60a7-561f-91fd-70a2442803da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 831955-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '831955-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4812879d-a16f-5c75-a38b-7bf8caedc6d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832121-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832121-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8c2dd1-9a0a-5ec6-9016-1f1c38065d67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832187-netflix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832187-netflix.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e14f5e5-7e78-519a-b9ce-d147335386a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832365-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832365-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f26dfdd-444a-5eba-95a3-a641dfa9b9ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832512-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832512-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16afdf1f-074c-55dd-99ac-a2856d30f53f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b45b5417-e476-547a-ba97-33abd852737d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832723-inheritance-claim-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832723-inheritance-claim-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1498cc51-a27e-5a2a-a719-f3b2da0cf6cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 83283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cad58f-bd6b-5d6f-a2f7-1422ef799599","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 832983-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '832983-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048fc829-bee6-50f5-bf2c-1a94592fad9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 833atlasbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '833atlasbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465a84bc-451d-508c-9a00-07db2574da99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 834125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d875212d-7581-5eb9-bc52-1d20bc39667a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 834152-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834152-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d54a222-d6c9-59e2-9949-841d45488774","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8342821coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8342821coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d2f9ef-adca-591f-a4fc-280871e0472b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 834525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd73e5a-0ddf-5d18-8976-6e8ad469334c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 834556-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834556-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b2d046-d2cf-514c-a888-4f0f406215d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8349527-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8349527-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0c6ac5-4be0-55fd-bbf7-56fe3e479522","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de39a81-68c0-53f1-bc7b-d990f658e860","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835129-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835129-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f1c84c-768a-5ad3-b47e-922209ab67a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835215-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835215-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7139e3f4-e9eb-5fb6-b70f-767a5181d995","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835222-ticket-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835222-ticket-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad4b7bf-aa7a-5c5e-af6a-ce08b284f048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--637d8e28-d3ae-569b-9093-b53db564ba63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 835341-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '835341-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0b2393-6c1d-5f1e-8603-f860429e9c31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 836210-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836210-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee811b5c-7c02-522e-ad51-c664a5c78160","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 836291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836291-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365a1261-50aa-5571-b7fa-dddf94cc3e16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 836424-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836424-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4e60ee-fd0b-5560-80ff-9e770f9c4942","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 836631coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836631coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac0fa65-cc5a-57b9-b972-f27e33348a26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 836729-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '836729-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0eb8aaa-cf5a-5e2c-be8a-ade50ef2e2fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837110coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837110coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ae1b09-e91a-567e-8f3a-a573636719c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837143coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837143coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6380ee8-997a-5b84-8814-25daf1ad8fba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837143kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837143kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3e1974-cdef-5e56-b61d-95884c8a726c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837144coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837144coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbdaf200-7a86-5109-9439-d5ac803ec830","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837144kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837144kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9c75ebe-d5b1-54cb-b722-8e95d9a6ab75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 83721coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83721coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94b69437-0e34-5ae8-8128-2b66cf0286ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e98d37-c48a-50f7-9c30-2b8e419ba37a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c3008d-25e5-59b7-be9a-f5131ebe9b58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837263-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837263-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18bbef78-6b1f-5ec8-9944-0583c23499a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837431coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837431coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85ee979-e4bf-5336-9c77-cb217ba859d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 83745coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83745coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4ecc15-f855-5965-87b6-d1b548efc856","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837463coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837463coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f62b280a-ec7c-5d1f-a6a9-2e24ab8fe9a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837471-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837471-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30be2b1-8fce-5948-bb24-51398f9f0022","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 837484-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837484-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e019e3-1230-53e5-bbd8-2daeb05cd5f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8374864095ba0b05722cdeece2c3b43a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8374864095ba0b05722cdeece2c3b43a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a733f2c-378c-515c-a265-dc1aea56f085","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 838049-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '838049-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f72f7ab-1aa4-5ff1-bdb3-47859fd0fdf2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 838112-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '838112-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf4b61f-1921-5f2f-bd88-28d72d61311c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 838295-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '838295-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb7bf58-872a-5077-9d39-afefe47c4e82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 838661t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '838661t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542ae1ef-4965-574e-92dc-c255505dc31a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8390013-americanexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8390013-americanexpress.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--681a1959-6795-5607-828d-59a30dafbe37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839125-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839125-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6652caa-d796-59a9-9ba9-e6b3fe19300f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 83922-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83922-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dcf77fd-e31b-5208-8ab2-1e2d0cbd40d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839239.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839239.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafd3b71-a4a0-52ec-a654-d3c99faf16d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839274-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839274-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702469ae-4e61-5a8b-99e3-d3bf9ccdbbe1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89ee3018-1a48-5340-ad39-cf343f407004","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839292-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839292-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7a0e5c-65ad-5c25-8d3d-e21ba8dec395","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d35f7b-f9cf-5605-845c-9add45c85707","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839296-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839296-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece9cb4a-166e-556f-bf24-db5a2d4db485","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839394-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839394-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f52377-4de6-5dc8-a93a-76956f7e595f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839514-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839514-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85296bb-9a9b-56c9-9b41-d46799b993b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 839756kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839756kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b141712d-0d56-5771-aeec-6bf7947773e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8401-xfinity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8401-xfinity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4a621f-372a-518d-aeb2-811c558f3f40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 840421-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '840421-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f267c33b-f532-5200-8f45-497464b91df1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 840940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '840940-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b595d1-7bee-5594-8cad-a9775b0879e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 840lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '840lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--341594f5-e2d6-5cc1-afb9-e09f03102765","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841124-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841124-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca86496c-0687-5d1f-896f-e22ef322de12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841265-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841265-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc636dc-ca08-596d-8e45-5e7f1f9702cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84132-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84132-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6be24e72-aef9-56f3-bf51-7794086c31b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841529-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841529-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1892d398-47a8-5159-850b-a13c08ffc362","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841564kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841564kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46833f9-284f-547c-9bbc-85a85c93af4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841571coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841571coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6317eb6-6104-5876-92fd-e88d3f851e34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841753kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841753kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c368b2fc-6acb-520f-9109-965225d229d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830dead7-f008-5f37-8c1c-beae26298aa1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0429eb-2f96-514f-a037-a92c4d7e1259","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 841lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '841lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3da6f04f-e295-581b-8984-e3ebcea1589c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 842125-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '842125-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14937a78-66a5-5901-bdc5-87967a3bb226","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 842317robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '842317robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74c6ac7-f828-5cdf-af31-0ec9d21c9a23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 842412-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '842412-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d53459f9-e91a-5082-87b2-b81a90169720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 842761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '842761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc79c9d-fc35-5a01-b457-b80e3e1f2125","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 842763-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '842763-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42dd69bf-d288-57f6-88de-c91a3a855ba2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 843653-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843653-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83072ddc-7ff9-5e15-895a-b8ee97eac0e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 843758coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843758coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d57eb9d2-cfc9-509e-af57-f711153765cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 843789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c014935a-f17a-5107-ae8d-558ac14804c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 843824910-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843824910-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f0af7f-1670-5b3d-8dae-d873d23003a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 843831-ticket-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843831-ticket-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50d9935-eb5e-5dba-a8b1-ffd8cda277b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 844919coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '844919coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d3d3e2-f99c-5329-8c85-6751bc39e293","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fef7476-8717-573c-bf85-4e13fc8757c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c865ce4-0a20-52cb-b9be-5875cd771857","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845223-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845223-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b67b82-78ab-579e-83a2-50902ec9811d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8452931-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8452931-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d57e63-4139-501a-a61b-3d1e884d17d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8452961-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8452961-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1453c70-34af-5adf-94fa-7519d814ed1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8452971-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8452971-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e3436f-3aef-5317-8fa3-9cdaf3485238","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28f7947-462d-5311-b420-af6e9ac39044","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845510coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845510coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--450cf5c0-6b1f-51b1-ae5e-ed0ba2bd30ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845525-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845525-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--611c1ae1-2e67-5551-a610-6cffb47eede1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845618-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845618-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a28af64-5d53-5855-a9a7-c444c60e03bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84576coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84576coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b917b67-f1c4-5445-8506-9eed9aaa6933","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845918-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845918-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e249abad-43eb-500e-911b-3bc3148f15b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845918-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845918-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1d7936-293e-58d2-871c-5b79bfade082","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845918-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845918-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5c0a0b-5871-52dd-b946-53002d7cd47a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845918t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845918t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2450d120-c6e5-5a0b-8f8a-2aad9e4f40e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 845meritbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '845meritbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e586b4-4b22-589e-9193-a4025e20edec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 846258-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846258-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e3ae8b-ac22-5f9a-a8ac-125255222d16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 846912t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846912t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f794e90a-7812-54a6-9cfa-944a98e1ae34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 846lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--565c472b-3f72-5561-87f5-e4cb880a29c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 846oslobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846oslobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f248d6d0-41f6-5be4-a1a8-d29aa0044d08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847123-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847123-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42aede0a-0086-541e-9fb0-b0b20250c500","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847222coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847222coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--494f9af0-668c-5955-a296-d9fb50bcce90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847235coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847235coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b40a043-184e-5036-94b1-bf8fcf56000b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847261839.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847261839.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc0a71b-9d6b-578a-b9c9-dd3680d81c51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847262-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847262-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55f87a07-8511-597b-ba9a-b8d87f1895cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847288-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847288-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d92ff6-318c-5f46-b5c8-49feb8ce7ba0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84732-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84732-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec11c37-57d0-525d-b882-a8af797c544a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 847333-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847333-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baf4ae35-6948-5edf-9fa3-2c83b86161a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84737-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84737-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df8ae56-cb56-5208-b9bf-0089ab280188","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8481919-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8481919-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d74085-7b27-523b-9f1b-989de05cc5c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08a0a23-6bed-5812-a12c-c8c688af89e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 848312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '848312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f2dd9e-6575-5426-8b6d-483e9fbb1db1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 848921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '848921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a77e4e3-fa4b-5247-b558-869dda8cb34f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849324-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849324-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83922718-b68c-57f8-a813-daaac7ea2d4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2625e64a-a50e-5f2f-8736-5ce2392b525a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 84938115-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84938115-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f247bc-90a0-5d4b-b75c-9a801aac7e04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849383-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849383-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cafd060b-9322-55bc-93ba-90c70d1189be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849430-usbank.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849430-usbank.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--720ea411-710e-5320-8c7b-9e9c08023499","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849617-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849617-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c86de28-f227-5d00-bc8d-fc79d9ee98c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849617-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849617-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--818a210a-7408-59e5-a996-3d2115b693ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849617t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849617t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345ee5de-68eb-5f85-af65-d4b03e13761b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 849692coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849692coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af76d7a2-afce-5fe9-9b18-1950000a4aec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 850235-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '850235-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d707d7a9-dba8-54c7-86f0-2b6e287e01fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 850950-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '850950-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42dab7e0-95cf-570a-96ef-6d59cadb26ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 850score.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '850score.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07fd3b9-eef7-5c44-87a0-c39b5c1ed9f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851224coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851224coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d12d6c-89c1-52ef-8916-cff665559171","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851246-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851246-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc78dd65-3b8a-5c3a-9b0e-c62073ca8202","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851633-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851633-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e0150d-d3b8-557a-bf10-1b30d16045b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851641-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851641-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ede47f-4167-5e5a-816b-84f7c9589987","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851662-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851662-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254d1acb-676a-5541-b689-722e12a93ead","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 851732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '851732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edcd0f3a-5e83-5398-816d-e6c0fd64c005","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419cf62d-fbb0-574e-af7a-0f6f7694f5e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852165-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852165-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74adc98c-8f8c-5d55-b57a-f0f0aac018cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852193-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852193-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b99dccc-d535-5fc7-aea3-7a826118d1dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852512-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852512-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63645196-b0a3-5556-a328-3c0d53558a24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d551550-e62f-534e-a277-3829585ba778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852621-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852621-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c379b8-29f9-5b40-a9d6-e500b5b77bbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 852941-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852941-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db53d119-8a34-5342-921d-e76338188930","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 853162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '853162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05157cfa-908e-5fb6-a850-82bac34a02a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 853162coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '853162coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66149e9-e4b5-5791-8535-3cca331488e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 853221-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '853221-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e57ff7-89b2-5af1-9b2a-3020b9727fc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 853247-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '853247-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33ee2e74-23d9-56f4-adda-2feb51690b17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--752ea170-52a7-5bc4-97e2-0ced764a1314","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854523-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854523-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3baeb3-8e65-5367-ae35-3c2b8adbec0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854523coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854523coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56aaac83-9d4f-5676-9291-c0dfe2251474","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 85472-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85472-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9280630-0e88-5e6f-8d9d-442fffb7fde4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854731-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854731-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--694d5c3c-4cca-50d2-8e93-3af2bf4f7574","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854809coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854809coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0537276-7a88-546f-8bdc-5543c06f37b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 854847-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '854847-uphold.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82c8e1f-5ff7-5ff4-a183-16244e22e631","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 855761-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '855761-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc750244-61a0-5acc-9f9c-81e94d6cf064","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 856125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '856125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26209f9f-dd76-5fac-a256-1f625cc5c55c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 856royalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '856royalbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92151010-f2b0-559d-a481-8775294c5b1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 857125-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '857125-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87c4af4-32d2-5ecc-802b-b158b91ce466","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 857217-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '857217-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d5d5f22-ee21-53ce-b402-d02d83e66086","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 857415coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '857415coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feca3332-988d-5cfe-a8b3-0868360c03e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 857859-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '857859-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93d7601b-b5d9-5227-9187-1e7a5859f298","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 858285-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '858285-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67796f11-98fa-5d67-bac7-0db8b8f4ea6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 858335coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '858335coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c28883e-38df-5825-af78-d17757ff46ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 858945-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '858945-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d46dae97-be01-5a6e-878b-96e86b1fd76f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 85904-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85904-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2e170e2-fc96-53cc-9954-f34cb4b989e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 859162coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859162coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77347732-a766-5846-8e5b-7f7894419dab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 859291-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859291-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--796acce9-c807-5053-89f0-5eae3b807597","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 859945-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859945-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1a5867-4594-5df3-b1dd-0f05f7a54500","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 85securityaccountscb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85securityaccountscb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a277a08-95b7-5b9d-86a2-0ae89161f543","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 861432-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '861432-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702dbc86-af2a-5d09-93d2-1dd05b8b9876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 861732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '861732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ce347e-1be5-52d8-8801-dd8014e15ae8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 862153-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '862153-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9a88fef-7b34-543a-9cf7-3c5af162c55d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 862542-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '862542-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--002c653b-4432-5021-bcb8-ae0b7d18fa0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8631337coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8631337coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775490ff-153e-5566-955a-eb9bdaedaf22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 863173-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863173-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65f6146-ff72-533d-9c6c-663509f5b440","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8632-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8632-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d74994-60f2-59d2-b8b9-8099ab3aa3ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8634535568756376t23124.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8634535568756376t23124.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a3dc0c5-b2b5-5ac2-90c8-e1b82d25e25d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8637-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8637-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1250c88c-9549-5602-85fb-8d87986b8b3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 863743-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863743-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c9f9fd-b446-56de-b787-52d4a061cfa5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8638-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8638-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582edc90-f885-5edd-9c4c-ae5bbbfe6ed3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 863kingroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863kingroyal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d5b655-42ff-53ad-9f1e-03ba402121b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 863setrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863setrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25b9b2ef-cab7-5066-827e-412ffbf182ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 864729-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '864729-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c30c2a4-1e8c-5262-a59b-9a93537b8872","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 864761t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '864761t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a699b4d1-6a8b-5468-83eb-d55ffa670ca9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 865162-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '865162-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--143126b2-f1dc-5ed3-b36c-ae3c02c30828","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 865192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '865192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8ede90-9607-5ea8-8acc-7bd91d05dcf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 86523tcoinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86523tcoinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc5cfc0-df1b-5d52-b002-1650560e1d2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 867180-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '867180-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a11481f-6fba-51f0-8811-fec4f3a350e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 867435-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '867435-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e80e464-3db2-5392-8cef-7508d62e6a65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 867998coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '867998coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ba6c8f-4c5c-5462-8919-a2429302ede2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 868253s-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '868253s-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa60662-d8c4-5225-9650-7f2361afc94b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 868295-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '868295-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81240b3c-b8e6-5c4e-9411-80eed868ee42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 869168-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '869168-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07bec2f-61aa-507a-87e2-edc09fcaa22d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 870242coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '870242coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ec73cf-4bef-5816-8af8-eb3ee973908f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 870998coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '870998coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86ebbcc-2b66-5af7-a72e-1b9154d768cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87131-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87131-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a35b18-59ec-5d0a-844e-03d47cad4d73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87132-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87132-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed0277f-766d-5469-ad35-dc030afe66d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87132-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87132-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd51304-c10b-5dfe-a377-f1f4192884ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 871620-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '871620-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54073916-d688-58ef-aa05-8a0bf6eae779","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 871723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '871723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4062fb-631a-5c79-964b-ed2650ffee9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 871756coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '871756coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1f2bcf-f696-5266-b39f-ea5e643d1e7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 871935us-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '871935us-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--773312ed-4a7d-5a20-a1d3-82691163269f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872149-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872149-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff5b6e6d-9128-5e3c-9630-fa0b679268c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87217-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87217-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879b1000-cd91-5c8f-af90-d08afbf1b83c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872344-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872344-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47a5aef7-a773-50c9-a6ab-41730054434e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872352-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872352-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5688ec9-e78a-5d86-8a2a-b0ad533e20c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8724319-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8724319-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f471a94-e148-515e-b0b9-b89060196af6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872564-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872564-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--596b2dcc-d148-5ff6-b65e-0830d3d2a3bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872632-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872632-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1958d058-ee6b-5abb-aa7b-b32f44695f59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872781-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872781-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3a4daa-1f43-5b05-abe8-736075189f6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872970coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872970coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e31e3bd-9f46-52c7-ba05-7797e5b75d9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 872992-bankofamerica.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '872992-bankofamerica.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d22d25c-9179-5b14-8970-7151602a4853","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87315-coinsquare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87315-coinsquare.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8de908-5eff-54c1-ad4f-137e2d90efef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 873195-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873195-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da01458-90c2-5084-ab5b-b9b5bf88d1a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 873462coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873462coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72457e82-14c9-5ac6-8b3c-3a702e789d38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8735651-federal-insurance-login.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8735651-federal-insurance-login.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e473327b-ab83-5dbb-861d-695c832ff459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8739260coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8739260coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0713baf0-0712-55ad-b67f-dae7ab6f39d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 873941kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873941kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fe1c39-dfc7-55dc-9ce8-1ee7d9908537","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 874159coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874159coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f6f61a-2bff-552c-b394-1a386d267770","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 874200t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874200t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239cbd4c-77ab-56b4-94cf-8d8ac6f44052","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 874236-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874236-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4855efa5-95fb-59ef-9655-693e9b45f75d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 874243t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874243t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2d923-708f-588c-82cb-3a2e1409c7a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87429-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87429-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2f03c8-6ea9-5b8e-891c-d83c94124877","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 874543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c809608a-9d6c-562b-9605-7e43fb313ca5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8751312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8751312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8edf3f-c492-5036-b146-c884635deb05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87532-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87532-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec8d1e6-df5a-5c04-90e1-9e92adcc6db4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87532-wealthsimple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87532-wealthsimple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6177b612-3c62-58a6-8036-5376a296831b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87532coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87532coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--372e0d1a-54dc-5074-bfa9-c4de513ebe40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87543-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87543-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77515d3-a38e-52cd-a561-2ddbed369547","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87553-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87553-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0521a38e-0dca-5498-833f-c10cabfa2914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 875912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '875912-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--714e1d49-a1e2-5bcf-8ba0-7b62cf6fc1d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87592coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87592coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70593e22-6005-5fa0-944d-d3bbe607e8c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 875981-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '875981-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--229b17b0-f408-5e62-aa93-5c5cd582d419","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87621-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87621-live.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--148fda50-bb84-5725-a11e-667e32e0bfb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 876438-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '876438-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81bc943-1aa1-57cf-bd8c-d2c40ab3ee83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 876534-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '876534-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bfa2f52-8810-5d66-ae75-f45e1e8cb8cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8768437-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8768437-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df00eef-a57e-5b6d-804f-329437fddfca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87691-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87691-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--044511dc-38dd-5365-98f7-f5823bdb07fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 877192-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '877192-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0097f947-423b-5d9c-be3b-2aa7dd7236f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 877352ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '877352ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c7d54f-7917-57ab-8276-26eca82b7e7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 877696-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '877696-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bc76ce-e870-58e1-8136-50748ddfbf0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8781286-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8781286-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89320d7-fe83-5c43-b02d-5a4be5477563","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8785362-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8785362-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0713ba-953c-5c36-8aa7-eff2bd6ef6e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 878653-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '878653-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e01e474-b8d9-51f8-9616-742e1f12ed24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 879042-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '879042-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba833834-6891-5514-b33b-204c73a8ea8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87928-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87928-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f87eb3a8-c29e-5afd-9bd1-81d862cf4459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 87929-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87929-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c719463-1609-5b32-9fd0-b0450376ac50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 879439coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '879439coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee491cc-37e3-5319-9527-cb66e17382c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 879846coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '879846coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54fb2e11-dd7e-5312-8995-ea0c23b96b97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 880156coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '880156coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89172106-dfb8-51da-afa9-064fae79cb8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 880912coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '880912coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e46cb327-5631-5b1a-bd67-6a8aefeb585a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 881097-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '881097-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1062de-be8e-559c-b1e6-efca27b92c9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 881145-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '881145-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e8807d-098a-525d-b189-bf832bde3533","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 881723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '881723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbbdd69-b749-55d2-87a3-d8e09f8ab8cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 882046-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882046-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48f9e88-504c-59da-a98d-d0b47f57acb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8823493-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8823493-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a5dc7be-389b-57f4-bcd3-bb25c52a46dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 882552coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882552coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8f0fa27-e122-5dbc-9582-d0f9a898741e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 882750coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882750coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0fde04-9eb3-5966-b9a9-b7eb73cd14a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 882marsbahis.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882marsbahis.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6c4b73-2c9f-5d10-be83-901ea7f4cc56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8833385-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8833385-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5604694c-ffb9-5c11-9232-f65f2d1b2ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 883432-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '883432-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33427094-c235-56c3-9c14-b9b3ebd0b289","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 88392045-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88392045-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab527c1a-8513-577c-a767-0b7e8a008f8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 883970-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '883970-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa02d5fa-c6da-55b2-a31e-36e2db34c795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 88438-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88438-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c6a0db-b212-5011-931c-e80e92c54304","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 884394-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '884394-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58464eb9-7b0a-5897-86b8-5c59e855d289","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 884422-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '884422-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e54f2332-7fde-5bba-a729-4d951d68cf77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 885432binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '885432binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8bf6c37-f4a1-59a0-af1d-359bda230815","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 88623-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88623-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94a8ddc4-6b42-505f-9192-1cd70dcdb030","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 887419-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '887419-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985a9add-e57e-500d-85a8-2dee34f67cac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 887quuenbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '887quuenbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9350c59-a7cc-5177-b85e-2ba95cabaa73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888-casinogames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-casinogames.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f3fb1a-b5b9-5e96-9348-07294f208bbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b710891-2a20-519a-a7a0-a2f1674d974e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888-starz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-starz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bd521a-e7b8-5887-89eb-01a0d73cbd92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888bets-aviator.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888bets-aviator.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4abf2f4d-7df8-5091-9daa-e015debe1f4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888casinomx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888casinomx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2542ced8-7414-54de-b661-d0215e4ef76b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888casinoxuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888casinoxuk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b0f0d4-c383-5edc-86a5-13dd202801e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888onlinemy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888onlinemy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c8f412-f866-59df-972a-1498335f2fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 888starzturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888starzturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd2fbd4-29b7-5e5f-9168-7f3e08932c52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8902185-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8902185-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da30423-a9cd-5638-96b6-0cbcc40e5231","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8903-ledger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8903-ledger.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64758e2c-bb91-596f-b823-486f91f01654","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 890321coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '890321coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a76e9de-bdbf-536f-a903-d9d092c79ac4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8904814-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8904814-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56ccf66-4c63-5264-b89e-7a73925dd600","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8905209-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8905209-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d301d06-40e2-5cf0-8d16-6c73cefe66ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8906237-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8906237-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5411822c-d6d3-55ef-b90e-e8fea77c361b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 890632-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '890632-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf542ec0-4740-5850-a0fa-c3aa19153866","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891031-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891031-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4f86cb-a24b-57a2-95b4-8474b0c614b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891033coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891033coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cd1b7c-d361-5374-8a49-df30b3481f1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891034coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891034coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9876c6f4-010b-51d5-8f39-87faf298139c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891045coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891045coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0772f06a-2611-51d0-97d3-de665d14a016","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891092coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891092coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198880b7-8a12-552d-97c2-89757d44ab0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891094coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891094coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ce9f320-42f0-54e5-bf81-7d64e86ae90a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891245t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891245t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d99085-a4ea-5466-8577-afdc223b2143","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891345-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891345-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abd700f-99b7-5701-bb02-aa54468c0aa5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89138t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89138t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a540e46b-8e5f-50ec-bf53-663b9bf9c46a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89144-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89144-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ba3337-4d90-5773-83e8-06cdf768f51e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891463-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891463-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1f5ee8-fd53-5ac7-9ee2-d9dd40b3e328","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8916492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8916492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b21721b-f718-545f-b178-6d1c258dce19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891741-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891741-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--407dce6f-a084-5a90-b483-a3f4b519cb6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891784-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891784-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0735d9a-4151-5032-8888-db7480714f35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 891timebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '891timebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fad52d-d6f2-5006-98e0-1235868ecc32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d498605-1a9d-5a78-8c31-68ef3559e500","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892124-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892124-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d07671-117d-57e0-bd0b-772d641037f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892130-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892130-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--168b85d1-743e-51f5-9f53-f97cc1f785f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892371t-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892371t-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6941a05-3d69-5f58-8450-741016adbade","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892431coinbas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892431coinbas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6582d4bd-260b-5364-80d1-2dd3f519333e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892734-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892734-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8c5158-71ac-5446-b969-4a6f0c761d13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 892843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '892843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae1088e-4fa2-564c-831b-b311f8ad1cf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 893219-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '893219-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f094b1a0-0e56-53f9-9313-1e3ff3a4f30d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8933843-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8933843-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580f0c75-0878-5373-b50e-d3f63d02f808","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 893428coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '893428coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a753f7-f981-5e62-a077-44ee3fe113c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 893784-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '893784-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c05f84b-4c47-58ca-8f88-f37225761d0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 893aresbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '893aresbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca52c96f-0fac-5348-8b4a-66185a2ab7e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894114coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894114coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dbf9c0b-c101-570f-9d00-3962f9a59b45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894127-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894127-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447099bf-a518-5aa7-a2e0-96b6198ffa76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894182-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894182-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701ff30a-3e4e-5192-ba02-7eed5bb122f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894243coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894243coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd77545-7822-55a8-8ef2-5abbae60d057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89437-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89437-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01e5018-b842-5449-bcd7-003e1aecc011","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894391-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894391-ticket-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--073d5d1c-65b1-557d-ab13-eab481e6f40f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894512coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894512coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db655426-ed02-5025-ac65-510fee7ee916","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 894833-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894833-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--512f8d6e-76fe-56a5-84e0-c6cd97acd74b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89514-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89514-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d8a87de-1b41-52eb-a6d7-9a9f037f427d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 895142coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '895142coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f488c6e8-643c-5492-b6a2-0d27c7f89134","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 895206-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '895206-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632f44bd-8f11-55ec-8542-d2849bbca4f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89521coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89521coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077feb22-332b-551e-8057-0aae4bc953ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 895436-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '895436-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17df91f1-4130-51f7-83f9-13b550bc90a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 895487coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '895487coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e800208-39e8-535d-b8f7-a3b96bc0ee41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 896275-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '896275-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4e5202-0464-53a8-8130-2adf9d2d5acb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 896420-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '896420-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--994a1b88-7614-5ae8-abb8-cc48767b78a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 896521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '896521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4683aa-f284-51a2-bd80-3d13b5034b36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8965962-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8965962-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ffd870f-fe72-5cdc-94a4-721015890ad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8965963-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8965963-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2e0cb8-c146-58da-8e63-df884f2d3212","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8965964-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8965964-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e86cef2-5b2f-5ff6-aca8-3d203406f909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8965965-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8965965-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98d3ccc8-a3c8-52df-bab9-90f290d21a89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 896782-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '896782-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f3d77e7-5d0d-5158-b102-8107775424ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 896setrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '896setrabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70f4d438-f64b-5f82-9ece-75fb09217626","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 897193coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '897193coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c34d7741-d6a8-56e4-b105-63494979cc87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 897635-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '897635-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a691c4-8972-5192-9daa-d0d56007531d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 898124-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '898124-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12983e1c-be4e-56d1-a554-338543b641a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 898421-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '898421-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--216f55dd-9a1a-587d-936d-1fa163091439","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89906c6d9245efa4992639407d36cbc7.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89906c6d9245efa4992639407d36cbc7.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9122f6b9-8763-5367-a0ca-e2df2ca5ec29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 899102google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '899102google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcf15bcf-d087-5400-9c15-0de58dae830e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--246dafd0-6729-5b05-9c53-000bf01f684a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89939-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89939-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78909434-439d-5218-867f-d9b9c2f5c2d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 89nj00.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89nj00.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3b08b6-ef65-5366-a929-88a669390bc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8au57-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8au57-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e0a064a-e1a1-53cc-87de-1d1d9a051c90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8cassinobrasil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8cassinobrasil.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fff4caa-2a2e-5c86-8156-7fd09b09cf47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8d8ypzcydx35.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8d8ypzcydx35.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f22d699-22d2-5fd1-add9-65634fa687f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8f4f7bcd0319.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8f4f7bcd0319.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5860c17e-617f-5b5a-977e-16576426fc65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8kyog05-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8kyog05-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506e8cf2-fd2d-546c-8407-a390a2ae7d35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8lends.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8lends.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99849fc5-eb13-5d0c-a1fb-bcd47afec250","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8lendshub.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8lendshub.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81db0d07-f76d-573a-b668-e59fd1a2a9d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8onsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8onsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836af5ec-b107-5cd4-bb9f-60a3437f79f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8slong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8slong.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99932a2e-5fb1-556c-b470-4d6e0d960950","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8sloni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8sloni.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327d27df-7109-5c90-a720-0135c183348d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 8zcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8zcapital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f9ae92-bbce-5075-ab3d-99b2699196d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 900312-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900312-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea12f454-040d-592f-b328-fe32f94d4ffc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 900412-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900412-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695071ab-681e-52d1-8e43-fdd478a54fc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9008172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9008172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26684bc9-0c6c-54ac-9907-ef4cb88981e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90098-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90098-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6927d23-b689-5f27-ac69-3c66d6a326c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 900ff8a2742b77b9e4fc46ec76a1b7a2.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900ff8a2742b77b9e4fc46ec76a1b7a2.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541a2bf4-03bd-5441-88f9-b3879872ecaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 901201robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '901201robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--244ad9aa-6883-5903-bc2e-ccdd44c4745d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90122-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90122-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93600798-5817-5b3a-82fe-b977da5a4196","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 901451-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '901451-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98c41c5-dad6-55a4-9b65-8249a046ddd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 901951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '901951-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12538421-115f-5dca-a305-e6ef8563e718","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 902130-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902130-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c481589-a6f4-5993-a783-c3b91585e99e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 902378-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902378-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e58b4af-4b46-5e82-ae46-9ebd9dc039fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 902392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d0a984-c701-56f3-821b-93190c34fe94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 902528-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902528-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b00524-9ed8-5425-8496-0f2bfc108d03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 902685-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902685-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b31e01d-85cb-572d-8f22-350aab478807","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34fcf71-71a8-5175-a08f-1ca2d59f58b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90302-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90302-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9384c700-a124-5ec3-881a-8695a366e8b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 903232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba9d65d-98ae-5075-87c7-a53a6df6d44f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 903451-ticket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903451-ticket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f701fc0-9347-57a1-8a47-ff870ff64c3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 903453coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903453coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec069bac-33f8-5a20-862e-129140ac8b64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 903816robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903816robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e311a71-7123-5e41-baa2-aece91acae10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 903901coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903901coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9210dd25-3dbc-59eb-b3ca-0dddc20da366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 904218coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '904218coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95e3a05-41e9-58d2-a75a-3ef5ef0d2e46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90430-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90430-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b2e26c-53a4-5861-ad3b-b6fb47f49391","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 904315-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '904315-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cefce3b4-fbb5-50b6-99ca-7d54b387e4bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 904567-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '904567-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--431f57c0-eee3-5eea-a280-73f1289548b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9050234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9050234-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b456c76d-528d-535a-a70d-f1d1811290ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90520362-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90520362-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35af8354-650e-56b1-9bf3-8fc444bd9de6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 905243-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905243-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4290f5ab-7a8b-51ed-883f-6116a733bb7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 905271coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905271coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d141a45-ed5e-5156-93ad-6404737abbc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 905281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9527f51-572b-5f19-82d9-40e7f0d221f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90543-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d88f33a-614f-575b-87a8-2ed9a2a726a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 905882-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905882-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17a6ae0-0cf3-59f8-a800-758ba11fa417","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 906389-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '906389-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a365bac-ea73-5703-b2e8-a171eaa9dde4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 906873-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '906873-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffdbdf1-78fa-5276-a61c-639b92bf2495","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 906highway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '906highway.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacb378f-f8de-565b-8bb4-e847004e5509","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 907766-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '907766-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f25a6fd-8b73-5c25-ae8b-407262105ac9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 907lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '907lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--867bfe22-73bc-50a6-91ad-3937703b6830","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9080casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9080casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20ad68a-df9f-519d-abc3-ebaca7aadd9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 908122coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '908122coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a159533d-572b-5936-aefb-9dc04907864e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9086casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9086casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cdfccf-3af2-5438-bec3-b1e91fc46ad2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 908749-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '908749-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2541fbbe-8d83-50ca-90de-d6637c1fa253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90980-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90980-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03a0f33-1b3a-51df-bb92-17736ff6b70d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 90a51ba92852ab8720deb3217941498c.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90a51ba92852ab8720deb3217941498c.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a98c0c1f-5fa3-5b47-b8f3-786094c6b806","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 910jokerbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '910jokerbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--debc6166-2106-5da0-b3a4-274ca7a1cdcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 911-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca756bf4-b86a-5ade-b177-8749a1be8961","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 911timebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911timebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd9e673-6b99-57b8-96ab-28edeccc6af1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91230-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91230-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ccf867c-1ad4-5c41-b64a-14791d08a3cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91231-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91231-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0560c736-9ef3-54eb-ad5d-f3f1c177945f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9123356-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9123356-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648bdfa6-1bc4-5012-a4c6-72043d60a542","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9123711-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9123711-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74104f6a-d771-5506-ba57-1ebe5fc41916","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 912403-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '912403-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ef17c6-18b2-5ecc-b0c8-60e5ce05a769","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91254kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91254kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b09adfe-dcb4-500e-bae4-087e2a9e05c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 912633-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '912633-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4abf5aa1-785a-5f2c-8116-437433035ed6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 912822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '912822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d2df6d-1ae3-55a6-92b7-59ced080301f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9128371-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9128371-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6afa9b30-cd82-59dc-bf7a-64ef71faa48b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 912931.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '912931.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b5266d-54c6-59e0-9f26-b4e2ff29625e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 912lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '912lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a488fd-0f38-578c-81c5-63c6da04924e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 913218-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '913218-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95958332-eb9c-5b65-8d46-11fe6949325a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 913254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '913254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb8e924-ec60-51bb-b1bc-47004ab1176d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 913287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '913287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b9d4a79-80b8-5e17-82e7-f3f9cb0a4f93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 913855-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '913855-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33209b56-6604-523b-84bf-2f283fdeaff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 914326-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '914326-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32406a4-c052-53e7-b4ea-d28c2b3bb3d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 914lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '914lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c5e9fbd-fb69-5601-abeb-5b629251474e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 915557-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '915557-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8939c1-c0d0-57b7-b06b-3f5d1b472088","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9155casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9155casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d617ec62-135f-5f31-9e93-331e68f0329d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 915712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '915712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c49b0c-f7f3-5c33-a7ae-5a7b90c47369","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 915lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '915lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e873509-6b42-5246-979d-0da5b799f6a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 916049coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '916049coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775b1a33-a3c7-5261-bb99-0df5904edcc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 916319coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '916319coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bbb7a-39f6-5dd5-93b5-386f3f56507f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917004coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917004coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee7fca4-4395-5248-9f80-8db0552805a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917260-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917260-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e655c65-e87c-5b42-ab4f-bc06295f98ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91729-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91729-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9d5872d-0ff6-5c27-bde6-c6bfc218578e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91731-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91731-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4cd6dc-24d1-5d1a-9970-b2931ba2df68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917310-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917310-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80eeeff-18d4-5fbc-9a7d-0b8bdf90623a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917454-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917454-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c402e6e-fecc-5716-bf65-bb088a84de45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9175casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9175casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74abbbe4-6c0a-5a48-8644-148ffd554dfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917662coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917662coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8f874b-fdc3-5705-a0ea-472aa0e93e54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917845kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917845kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d723306-23f4-57e3-8ee7-05d5bbe9b79f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 917lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a61ab7-1325-5445-922e-78efbbc4b925","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918-101-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918-101-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7340c75c-2e5a-5c96-b7a6-911c99e35e3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18570aa7-6267-5790-9df8-17b8dc36f969","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918232-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918232-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d7ab3f-cc6c-534c-8382-0a3154630dab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918234coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918234coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d91806-ad87-524b-976b-57d3fa40e0d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918282-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918282-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed92319-7f75-5be3-85ab-7f4fd17af1cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--514b989c-ce55-505e-b0c2-a03edcd777b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9182casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9182casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c983948e-8e69-5343-a4f6-470c57276ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918321coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918321coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090071e0-a9e2-5043-8d58-d2e7f1949661","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918357-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918357-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7a863e-9fc8-53a0-995e-28cf80496436","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918358coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918358coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401f9aa6-5315-5cff-a0df-c1b7dfa6e38c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918387robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918387robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b5af2d-533c-584f-b262-8d3307c2838e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 918502coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918502coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3144b2-bf59-5159-916a-1330ed1dc1e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 919251coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '919251coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29c8e66-1996-5531-a932-d4242dc277f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 919491-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '919491-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b71d547-6611-5207-b798-61366ec7906c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 919496coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '919496coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d40106-cb7e-59eb-aaa8-33dab4770413","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 919lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '919lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb134bf-66aa-5378-8efa-5afe72a762a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 91voda.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91voda.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0033c4b3-2cf0-5f92-8feb-43acff826b2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9204214-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9204214-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1831e06b-8df3-5bd0-9972-d5f8b1f5a230","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 920952-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '920952-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b991fa-7080-570f-aa4b-81525111518f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 920lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '920lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8ab04a-1a6d-5054-8518-496a7e29c69d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9210-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9210-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b885e3-a5e7-5010-9bb6-628c71bb6ffa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921012-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921012-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91240a91-ad10-5e20-a200-caef09731eb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92114-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92114-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2fafcf-f718-5123-994a-b05a2ec8db8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d087cf-5716-5ca0-a15e-39519d1a81c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9213781-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9213781-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b368093-754c-5158-8ed6-8c48794642a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921430-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921430-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94bc6146-0f1e-50d6-9dea-6ac5d6216acb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921589-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921589-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c07eb07-a2f1-52a5-bf90-2bef6c346152","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921633coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921633coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9639ecd-7b31-55bf-9909-110cedc4a7fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921784coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921784coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d8fe6d-b584-5588-bd50-4bc2410217ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9218417247.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9218417247.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47d879a2-17ec-513b-8af9-5d3036a72431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 921lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '921lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4897187-73eb-5890-8c90-a27bd7f41a0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e5e07ff-ff4b-5bd8-8fbc-d7c427d72f95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 922402-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '922402-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d78711a-04f4-58e1-89ab-799a662f763d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923043-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923043-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3bb9c21-e904-565d-b73c-5cfdbe3614f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923145-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923145-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09178083-83da-5f91-a1dc-619bc569fb9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9232829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9232829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ec7d1c8-602b-58ff-adf2-487dc83bdd95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92342-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41064281-6359-55be-93dd-7e28b851b5fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923589-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923589-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29454225-10ca-59c0-b66a-b082e637bf8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923591-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923591-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6034b55-9e45-5eb7-ab18-a7b28d18e9d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923712-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923712-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b783a62-96ca-5d54-84a8-1bd6de406e6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923743-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923743-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be35480-5750-52aa-a89e-3c6e2e9a2816","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923826-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923826-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b96f7621-565d-5468-9783-0939a0ae2da9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9238coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9238coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd92f4b2-f39d-5191-9c74-cb35f622a7ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 923925-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923925-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45812b92-e33f-5da3-a952-e8bc186b749f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 924224-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '924224-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11f3763-f464-5d84-a924-c7d8cc7c8031","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 924298-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '924298-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81929680-79e1-5026-9554-713963ccc69c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 924358coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '924358coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531f8d09-2393-5605-9a93-91cdb5fbe9ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9248195-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9248195-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ebc4fb-58ec-50b0-8cda-13f0140dbc34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 924829coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '924829coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e62242-a036-5cdb-ad40-c2904f924439","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 924874-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '924874-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55b9ea2-4595-5b80-addf-148c4688271f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925173-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925173-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd640ff-1963-57f6-b379-74c249013c4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925174coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925174coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e07265-121d-53a0-93ed-28e5cdf7f35a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925367-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925367-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0196e23b-1072-5054-97ef-b2fff085cc50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925398coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925398coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02befebb-8ac3-5c98-b2a6-01d37dc2cd67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925477-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925477-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60876b6-97b7-5f08-b234-50d6086da7f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d0f04b-19f3-5a57-9ba5-98fdb6f24208","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925727coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925727coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9053e841-a995-5447-9968-4d0b56fd17c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 925timebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925timebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5844b7d5-e771-5fe1-85c8-4f1cfe019c97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 926148-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '926148-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba1766b9-493c-59d0-9c6c-a39f767b67b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9263267-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9263267-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b05ddc3-7736-5a1e-b496-a0fb5926259f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 926452-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '926452-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c3277d-d486-5697-86be-1fd9e4cdec58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9278271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9278271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e620fd09-2458-547d-b44d-1bbefda1539b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 927832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '927832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f59657-e5c3-5ff6-80bd-4401b0119b51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 927casinoroyall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '927casinoroyall.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e336c7f1-0917-5ec4-9d75-dd33b654f069","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928135-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928135-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e5be1d-1a4f-549c-a56e-9b6cc99771eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92815-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92815-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d914ccd-f654-5b7d-86fa-b9976162e384","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928172-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928172-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36a4a67-c4c2-5941-95e7-569909abceb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928173-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928173-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--556190a9-b742-577c-8226-eb8520ffb930","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928212.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928212.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b64567-8158-56af-9fe2-4993d432e463","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928312-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--172b55a8-5cef-5a28-a5b2-d3edcf5f221c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9283172213.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9283172213.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b254534a-f4b0-5bd1-9c83-408a97ffa289","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9283321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9283321-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c04052-d9bc-5f17-b325-6c0ed65c2367","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928341-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928341-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b914a3b2-c763-5c9a-a08f-71782fce6e05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928362-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928362-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7954fa86-2eaf-5e75-9b03-4e7d5c557fac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928372-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928372-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4157256-e511-5e27-acdc-9bce48ceeff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928374-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928374-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1a227c-9738-5a17-a534-b86d6802fdac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928377-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928377-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ca4c9e-9138-52ce-a0f6-855e3d5112dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928414-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928414-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a9bebd5-5828-505a-8396-fdfcd9114bb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928415coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928415coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c929df3-dd44-55a0-ac86-e2ffcdc0d896","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92847-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92847-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b49596-e0d2-5491-8143-7612109b8c91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 92847163-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92847163-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4fc694-351b-5c6a-8269-8d33cb4a9b18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928524coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928524coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ab7a8d-4fd6-584b-b4ff-f26ba47ea76a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928917-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928917-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4acaa15-5adb-5295-9a92-94b322f40c3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 928lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73988ac8-c6d9-595c-b88d-2583a36d3cbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9291098-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9291098-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08260ec5-67e0-5822-a385-c785a3989186","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 929131coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '929131coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22321ebc-517d-547f-89ba-bec261e352e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 929381-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '929381-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f81b5c-b631-5344-90bb-869a97e16fe2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 929421-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '929421-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc73cca-8313-5611-9bf1-558c8b20f1c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 929841-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '929841-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c97b6a-0713-55f9-a935-6b4d8a477ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 929871-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '929871-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc445699-932e-574a-8a2f-62a496bf8658","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 930023-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930023-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e36934-35d2-57c9-81e8-a8719b8149c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 93020coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93020coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1db66b-15f9-51c6-a3ad-c6c2ddcbd675","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 930217-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930217-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1441073e-f424-50c9-bab2-ced6be97798f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 930539-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930539-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4bfe1d4-5336-5825-9c45-491725c46138","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 930bahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930bahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b57790-9d76-5d8c-92c7-869a219b80da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 931204coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '931204coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de6679a3-cd64-5458-8ef0-66121938a9c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9313781-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9313781-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86de9fd-2748-51fb-afc7-3806530fe63d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9313981-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9313981-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a7f354d-d49c-56e7-ada2-b5b0a4df21de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9313984-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9313984-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9f14b44-7b62-54c1-8c5e-abafa751786f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 931602-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '931602-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a6a2e5-fa4e-5a59-bf2b-86c6950841b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 931628.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '931628.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--339c560b-bc53-5b56-bd04-7ba3ee2ef085","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 931861-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '931861-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffc319f-71d9-5cdb-b5bf-f327301cab29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932325-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932325-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6e4b3d-1985-5cb7-a1e5-3b1d3b8fba39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 93233-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93233-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--209f4d2a-6f8b-5542-83cb-da8e802c0e40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932572-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932572-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8d451d-45a3-524f-a227-3a2b6ed99a18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932673coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932673coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dba7d1c-3bd4-5f10-8bd6-bdd954b49e69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932819-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932819-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a904689-12ec-5af1-ab61-e2dc86fdb909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--406f167b-a5db-5be1-8f2c-70f2b4e3eb91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932847-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932847-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b84164e1-15a0-5599-86f3-abe2adb5d8f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932892-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932892-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11aaf2c4-b3e8-598e-8149-4d24b9624db7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 932kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932kavbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2093b7ff-cb91-516b-a9bb-0626bf34accf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 93319-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93319-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0947fc3-6593-5986-b01a-a30eeeb923b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934723-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934723-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff5c2b7-15df-516f-b2da-6daaa760a793","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--528189b5-26aa-506a-b350-dcac6a9e0c4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934726-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934726-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56075e32-df65-5bfb-8ddf-45ba694da1cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934765-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934765-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12a9731a-5711-5129-b92f-a208a27da6cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9348-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9348-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62e2f3f-8044-51b7-969d-e0eb9e7290ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934831-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934831-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7adaa909-64eb-5603-a6e6-91627578e862","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f5e80a0-49b0-5c7a-a8e9-71ee22dafb28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 934844-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934844-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3322301-abaf-5946-a7e1-759b63ac5cf5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 935242-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '935242-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ab95c5-29a6-584f-9722-d677eb3fa1b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 935742-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '935742-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3207e6fa-c2f9-51cf-9679-ce935b0071ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 935lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '935lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b80f0bf-d5a5-5953-aa9e-5135ac9dab0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 935timebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '935timebet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb77a65-a251-518f-af45-06d7d79226b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 936lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '936lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92bbbd5b-11e7-5b2d-b311-99ab60c18834","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 937162kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '937162kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3190f1fc-6777-51dd-9adb-67b0cc18e447","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 937431coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '937431coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d185cb9f-a00e-59fe-9509-45fc83fa677c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 937492-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '937492-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a05f2f-40dc-5551-a07b-414eb61ca608","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9375w5vx29p.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9375w5vx29p.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69495f5-e002-53d3-9946-f8138d13caee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 937lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '937lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449108d6-b274-52fa-a519-6479c8edb3c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9382281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9382281coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a00ba0-7d07-50a0-a068-0a0d5581207e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938271-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938271-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d77d4fa6-be66-5b5b-8b6d-7804fbcd0dd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4028fd8a-3887-5e04-9d4a-060356ab4375","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938310-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938310-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ea6ae6-5745-5255-b3b8-44a22087c642","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9384203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9384203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af497e74-4c34-5ee4-9642-45606807e033","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2a0ad3-b144-566c-b60e-163e49c33b3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba9d10e-0bbe-5048-8bec-db037a1f2e1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 938mavibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938mavibet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b1ec2e-f652-5a91-aadf-a11180358dd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 93903-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93903-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b08132-ea07-59bc-ba8a-f6641eb3ab8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9392627-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9392627-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd101bb3-35c1-5dee-a5e5-b7c382f375f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 939287-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '939287-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f47df9-74f0-5e93-9c14-7fc576f02056","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 939lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '939lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d638845-311b-5df5-b455-8369c5586190","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 93b8a3e65861ea64279e713b84f4b09e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93b8a3e65861ea64279e713b84f4b09e.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6e88cb-2f57-56b7-9bba-a0f9baac9981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 940224-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '940224-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--021b6fab-774d-5ac6-9af3-83ce80e526f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 940934-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '940934-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6d6699-321a-5e11-8576-175650d160d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 940943-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '940943-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--847e8dcc-f72f-54f4-86db-6d168eeb910f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 940lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '940lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca447873-eea2-51bd-9361-a7074344c5ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941041coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941041coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d7d73b1-30ee-5068-ae82-353e82df058a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941045coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941045coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f55207-619d-51c8-b00b-45123f56e9aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941053-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941053-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe114c5-ab89-5613-98af-6acf4318d666","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9412689-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9412689-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ee6be5-13a3-537d-aef6-485c1c7a5c94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941683-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941683-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a4f5db0-7f3f-5f83-9133-e4c13e96f433","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee326a9-bacb-5cd9-b4b6-098775dab04d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 941mavibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '941mavibet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ff1d07-108e-5791-b5de-9d22e7b42099","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 94203-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94203-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f5bbc1-12d3-53f4-a21c-aecb29387b5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 942536-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942536-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--383aa52e-725f-592a-9311-a22d5ca6260d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 942792coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942792coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b9b08a-83a0-505d-9c04-185108f1889b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 942834-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942834-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86861b61-3e1b-5760-be86-87e859247831","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 94285-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94285-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1427fd-3c52-53e9-ae9b-8bb25e0bc3a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 942lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a965836e-06ff-5b9c-b8f6-859b79d0a8e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943246-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943246-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad139fc-0c31-5854-986a-1345a31d5c7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943284-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943284-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c72490-a11a-5456-b991-c58ae1f79e1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943625coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943625coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d511c5ea-16e3-5068-a977-f9c12ec12184","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943943coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943943coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0747a81f-5b03-5ff2-be3a-81f535ac0cb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943985-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943985-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ca5889-ab28-56ba-877f-277059e69059","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943993-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943993-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b99934-4043-5875-a3b4-f6f667665054","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 943lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78c56f0-c476-502b-93db-63e68fad2402","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 944lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '944lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049c2b06-8849-5898-8eb3-80198145ef87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 945136-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '945136-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c038cc7-ff85-5d7c-b3e7-0fd200daaf36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 945393-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '945393-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7c4e335-ae9d-56f7-8371-6cb27203f391","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 946131coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946131coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a418ada4-ebd3-5dd0-b1c5-6aec61d84ecf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 946238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bcd6c40-c142-5e65-a297-d735cafbc4fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 946338-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946338-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abaef3f0-159d-5490-9f44-4698ccb66107","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9467279-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9467279-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da4a79a-b46f-5b51-8335-e34ace0b25f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 946816-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946816-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd0bcf9-2a9b-5014-ab0d-aea69f887ee6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 946lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2cec22-2f92-597a-ac40-48a74f46a704","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9472338-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9472338-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711b1f31-6e0d-59d2-a7e2-8b99916ef651","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 947255coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '947255coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ef6fba-ccb3-5621-85e3-5819ab193974","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 947266coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '947266coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4306d9-ff38-506c-8d17-12809051e7c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 947283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '947283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6ce059-79cb-5670-a5d6-cc6d4e8acf00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 947tarafbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '947tarafbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d999b8b-333a-5d7b-9d4a-8ede717d2330","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948121-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948121-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de081d4-346d-540b-a406-67d144b8f519","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948190-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948190-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4903d0b-5f18-5751-93a2-3669da1f4079","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948214coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948214coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda4a984-c3f2-53ae-b127-711aada2359d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 94822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e3bbe-bfdd-5d5a-b9f7-2127843570d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 94829-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94829-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a3a0f64-0f48-5ac7-ba88-b150ad2c10f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948501coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948501coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9341c67e-f8b9-5d68-8e10-a2db683b426c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948524-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948524-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e36d8c3d-6b51-5ab9-a881-107ea3a6ced9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 948655coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948655coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bcbfa3d-b902-56e8-89b4-9aa4116ea8e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9489043905njcsdnv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9489043905njcsdnv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44939144-a037-5a0c-b8c5-026d0ddf1ca5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 94930-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94930-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b76742e-9f50-531e-be4c-09eb2f127958","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 949837crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '949837crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f804aae5-be33-5cd0-85a3-357499b9f438","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 950038-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '950038-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6db6fc-b6fb-5f8a-af22-6a78da2e4c23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 950489-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '950489-coinbaseportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d74244-ef7e-5929-a9d4-7af90a201ba4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 95104-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95104-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ec44b5-4857-5516-9346-46db5484bbc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 951kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '951kavbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7280281b-5cc8-570d-968a-9e8ea158f6ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 951lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '951lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a58dc1b-419a-5251-be97-f0275fec57c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952135-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952135-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aca77ef-faa7-5a89-a4be-2a28f5f5f4e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952166-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952166-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33478dc8-765c-5365-9b03-e8f9cbc2210c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952178-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952178-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a1ff69-7ea2-5dd9-b268-1f687759b548","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952186-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952186-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b6516d-2cc8-574a-91b3-c50fee22a3a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952316-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952316-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5fbc89-fd12-51f3-88b2-9059d8a0e5df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952522-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952522-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a642ebf-d764-57a5-b36e-e416a3dd91eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952593-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952593-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--513245f0-fdb3-5bac-b013-844600f7f67d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 952821-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952821-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92e6c3f-d3a8-5f80-a867-db21155ee95d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 953523-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953523-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279b883b-56c4-5bf4-9564-2e8c029d18e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 953536-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953536-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482d5e54-41fc-5fd3-95b7-8239a455ce03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 953879-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953879-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343536c3-62d4-5428-9ec2-881c2fdc8684","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 953kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953kavbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1042e67-89b7-560e-b123-232963472b28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 953lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--758f9364-ae9f-5b53-b3ce-c819b87eca69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 955241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '955241-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81269a7d-2d3f-509a-a76b-7233231d48e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 955lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '955lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41db60bc-5259-5079-b713-0173408a78ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 956712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2bbd35-1c59-552d-a2a2-33b313019c1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 956722-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956722-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747800fc-2469-5272-b044-1bd60b4daa92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 956849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956849-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e296bac9-776a-5dc1-9c12-ea9e7385dc10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 956882coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956882coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7110551-5e60-5630-b2df-cee5a64e6743","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 956974-coinbase.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956974-coinbase.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad4be20-1b20-59d1-a760-da7b1ea7126c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 95726-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95726-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec562ecc-6979-5c3b-b245-d84213aecf78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 957822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '957822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddb84ae-32ed-59f7-8a3c-840004ebc57f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 958164coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '958164coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0792e3c0-2e57-5536-a475-67d55526794b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9582789-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9582789-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eef78fd-9244-5677-9c90-44a43090ab4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9582876-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9582876-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc3fddc-5472-581c-99f6-37fd5c6ffb69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 958396coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '958396coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b41a35e4-fa11-5691-9b21-2cbb28cbf373","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 958kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '958kavbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd66738d-b1fd-541c-8c23-9a27667a0a2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 958meritbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '958meritbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01fdae82-d78d-5943-8802-483a3094ca23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 95943993-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95943993-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4edb4d-9987-5a6c-969b-26be5fa450a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 959dinamobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '959dinamobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e9a00d-b64a-57d6-8ad8-f7c5c15e8e10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 959meritbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '959meritbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2686ae0d-3954-51bb-bef9-571e44a6b9fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 95sa8-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95sa8-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--057d4440-e793-5b82-8305-047b93356062","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 961762-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '961762-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c455be-0ce8-55e1-a4f1-ca54cdc77440","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9625casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9625casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3d24da-04d1-5d4a-8069-176f6f5f1cb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 962613-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '962613-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699a1a66-1bca-5c5d-94f2-f9e34a74b1e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 963093-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '963093-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7a19d2-83f4-59f1-b074-18a8b268e79f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 96329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6374ac22-348c-5dbb-873d-4693e44422d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 963vegabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '963vegabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91586094-7650-5fbe-acc4-900dd09aeb0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9644664-regionsauthgateway.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9644664-regionsauthgateway.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--436f3c21-dd36-5bc9-b75f-fbe8ad745e14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 964lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '964lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6ee390-a0b9-5ce2-abfd-21c8c128c4ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 967247-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '967247-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64676184-7a41-54fa-80b1-8c922e20c9ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 96727coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96727coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3350c176-3071-539c-b26a-0fb1b097112b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 967918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '967918coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4384d22e-b2ab-59b6-8898-85f03cd70569","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 967lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '967lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360492b7-a556-5d5c-bbc3-28fc15c7fcaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 968383-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '968383-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77242657-dd94-58e1-bcba-add923e05a53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 968835-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '968835-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45988ee4-fe4e-5a56-adbe-32451a16ad57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 968kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '968kavbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a110f19-aa1a-569a-b48e-ca97b1c720cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 968lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '968lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7717daa-cf61-583c-8513-5bcb89f1afc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 969lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '969lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--995dff70-ef6a-5d7c-a422-ef66eacf4d93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 96kng5-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96kng5-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80353d03-275e-5ce2-8332-e10bb1660caa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9712062-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9712062-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f9470b6-fd3b-57e4-9b63-e25a23522990","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 97121-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97121-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0a3c0f-7455-5fdf-8ce5-8db7eb997c88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9712738-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9712738-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e3e9b3-c4a8-5e6f-a9c0-5a10d63f9ed8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 971539-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '971539-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbba52b-fd1f-5efe-9b90-92e8e6d38e00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 97182-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97182-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abbfb79-172f-59ac-930d-c6a404dd9cad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9721837-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9721837-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1937004f-0bac-56e5-8e37-a14764a6d47f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 972356coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '972356coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b5dd70-15c3-582b-bb4b-227ffe721387","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 972759-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '972759-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6768e529-5ca0-5e06-b8d1-45efffde723e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 972856-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '972856-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29529171-f16c-5c10-aff1-ee1703983a85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 972lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '972lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7914b7b-b5cf-520a-a2c4-87ef74029cbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 973215-ticket-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973215-ticket-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c4f030-f44d-5d80-9ae5-3e695ff28fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 973293-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973293-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b899f55d-ba37-50dc-bba9-356b82f969a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 973858coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973858coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2237531b-5d82-52b9-8eee-a01a719ecb4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 973lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e791bfc0-3cec-5bec-800a-10d669ace3e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 973mavibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973mavibet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408ceccd-1411-576a-b819-5089e4d0e516","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9743-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9743-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a978a32d-3f0f-560d-acd3-ff4ea745e518","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 974301-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '974301-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e317d4e-e225-5d84-84a8-c3ee0f59be1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 974532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '974532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4506e412-1da6-5958-8cdf-66f1c50b0aaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 974lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '974lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4cfa356-d5a7-581a-b42c-28bf94abf363","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 976121coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '976121coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475ee199-bbc0-5e6d-967f-a061cee66056","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 976251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '976251-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9eeffec-9fae-5e9d-a2f0-df6a8e64032f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 976724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '976724-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7bebbb7-766b-50a2-b22a-8d3ba174bfe8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9771701coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9771701coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23ca8a7-1a84-5927-a4ec-ed8efbd2d59b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 977263coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '977263coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553406ab-6526-59df-af36-e203f0b7babb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 977281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '977281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c61a2f-fd6d-511d-9ee9-7c8b4fa5a2ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 977346coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '977346coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--656be6a3-ac96-5faf-b8c5-246feb44cbdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9781238-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9781238-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ff8547-ec70-503c-a64f-c30eb0675b91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 978239-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '978239-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09dfa2c4-eec1-5349-87f4-94b65083376d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 978421-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '978421-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad91cdd-4b57-55b9-9b0b-0cd75544f154","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 978828ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '978828ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432dbab8-1de6-58c2-b71d-49c1904d7c9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 979673-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979673-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e603d8b2-3536-5b43-8b75-93d89a932de5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 979lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55b7a8c-733c-5df6-8b1e-fb0f2ec6fdab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 980384-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '980384-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec442bb-7912-5f0a-87f6-5510d5f1ed91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9803851-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9803851-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9603d93-e0b3-5db3-b526-a0aca961a983","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981272coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981272coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cfa09d-d2b0-529d-9e25-9b50b2305973","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9813-regions-identityverif.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9813-regions-identityverif.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--498169d5-e769-510c-8e2e-85f8ec3df979","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98131-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98131-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a349f713-3032-506b-9ff3-e4e1e7eef256","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981399-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981399-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d14bc2-03d6-51f9-a461-a2c89874e027","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981465coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981465coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bf370f7-b36d-570f-9958-e96239e0e2ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981722-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981722-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deee415-eea3-596c-8578-254bbfd5a2b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981722-ticket-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981722-ticket-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21779b65-152f-516f-9d60-ea7028a13baa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 981822-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981822-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea911b9-0d90-5f6f-ae51-ae2b39d85bed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982001coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982001coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6890943-ccab-5bae-83d1-2e7923e5bc7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982012coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982012coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0124a5-4107-51fc-92b7-21f3f87ab04d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982102coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982102coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13017f40-b4b2-5384-b20a-42a384512063","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982133-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982133-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f40d5a-1646-5780-9da2-d81dd3bdcdef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982176-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982176-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d58d16-0cc1-5c0f-8288-958f38bd69db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982221ab06a365a5ada968647ecbddbf.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982221ab06a365a5ada968647ecbddbf.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e326dbf-659f-5d53-bdf7-024fb547d518","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982346-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982346-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16ad6dc-96eb-51f9-8694-21bb3360b2cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9823712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9823712-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b3641c-0c11-5a76-a23e-1b95b76d29e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982440-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982440-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77638b64-9e52-59b3-8548-66b710e93e5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982541-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982541-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed1ebdf0-2bcc-51d8-bbed-ffb79fe9422f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982574-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982574-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833b8298-5e42-530a-8c40-5e458d83f1e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982575coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982575coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fdd057-4ea8-56d6-8590-f20abbee887f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982592kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982592kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e48de5f-fb11-5477-ba4c-b088011a0878","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982603-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982603-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2103fa2d-0db7-562a-8afb-d599c6aa37bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9826bad6510e34e6092166d5bd8a7800.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9826bad6510e34e6092166d5bd8a7800.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7fac22-a8a0-52e0-9805-8c88d0174ab4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982711-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982711-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb9c289a-e43f-59dc-a070-613a4eae117c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982756-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982756-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e069e32-f50a-521f-b6f2-415bc1a13687","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982dinamobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982dinamobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d17e2a8a-f90e-5257-8d21-46d781c59ede","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 982lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a274cd96-d925-5fb5-8ded-a7dbc2c22e6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98312coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98312coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1291aa-6f0d-5f93-a03e-e59eb481a598","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983249-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983249-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c72940-7c4d-56ed-b28f-4d9b65d58d6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983257-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983257-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c508d7c4-3cd4-58a6-92bb-65d3b24523ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983283-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983283-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86973011-3c4b-5952-b858-f199027ca05b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983283-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983283-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74bac1a-7adc-56d3-8bf8-bd8c5ad2396d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983341-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983341-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2de4062d-2587-5467-8ae4-b06b64dab5c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983455-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983455-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54baf9d9-9317-5df2-b606-90e574e257be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 983773crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '983773crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b95956-5cdb-5753-9b0b-cebd6dbc30bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98392-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98392-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52c50e5-52e9-5c96-8deb-9c572ff44764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 984092coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '984092coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c10f68aa-5d8f-5028-8939-8b20323ac0e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 984323-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '984323-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b0d191-409a-5366-b20c-5f41f53850d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 984561-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '984561-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab2c83da-2513-5506-bfd9-65e1de6debac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 984788-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '984788-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf16bf08-0c09-59f9-8fb1-4d9cf7e08b3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 984lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '984lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c167fb-3fa5-51b5-a901-04bfe03cf1d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98502-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98502-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc101b65-a1a2-5cbe-82a6-0e372c4d207d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9850254-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9850254-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9ab3a3-1bcb-5d92-8635-caacf84ead69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98514-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98514-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1454d2-a094-587b-b9fc-3a7b55f2fce0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9851coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9851coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad27dafb-ccaf-5326-b7ed-68a17eac357e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9859267-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9859267-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d20db88-2dc2-55d3-960c-b605dd2dd31f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 985lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '985lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d34ab845-80d9-538c-8ccd-b33ea6595d28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98612-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98612-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d88a2ae-3001-5b1f-b885-3458d5a41e0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 986450coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '986450coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf1d11f-7677-59cc-a6c4-692896022981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98649-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98649-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--670ad28a-4d72-50a6-9e86-072dd4fdbf0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 986lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '986lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf9c4383-2b48-5101-aca8-a5004072906c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987126-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987126-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2aceaf1-4133-5d86-98f5-0ef4a87150ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98732-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98732-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955d65ca-1b8b-58b6-ab85-6cee488ef1a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98753-coinsquare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98753-coinsquare.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d571bf-2127-5f72-b6c5-d3eca44ded7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987561coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987561coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dee9b13d-9100-5af8-93e3-cbdc1d5e0765","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987632-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987632-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c515bc0-c047-5eac-953a-5a13942e43b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987648-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987648-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6474127-e382-5e79-b7b5-3a56bd98d253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987grandbettiing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987grandbettiing.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bb1cbc-fef2-5dfc-bbb4-394d1aee062e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 987lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '987lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e5f688-37a4-547a-a605-46fde286b937","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 988llunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '988llunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91e3ff4-b6c8-5c76-beeb-59ba09fba1ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 988lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '988lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbdc02fa-55cd-5e44-bf09-87bc4c90e2c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989-capitaloneaccess-auth.creditcard","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989-capitaloneaccess-auth.creditcard']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a743c733-a857-5dff-96db-facac7a90fa5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989113-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989113-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7444de98-01f4-5d45-9582-8837d6c83258","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989273-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989273-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b592b027-f037-55d3-99d9-6a932425dacd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989377coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989377coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--173468d6-4aa5-5b5f-9642-b138de34021f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989377kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989377kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7298e85-6e4e-5c30-bf60-5ec575e718f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 989lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '989lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1fc1391-bc3d-574b-a685-9d56fafac80b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 98a01556eebbb47efdf887f440d290dc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98a01556eebbb47efdf887f440d290dc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479cbfba-4af6-59bf-ae4e-f49e8016d4bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 99-drugs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99-drugs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19be5951-b2c1-55f6-9df8-a492494eb52f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 99021-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99021-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc889c84-e446-5235-b5e5-79c9b6552811","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 990truvabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '990truvabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906a0621-a8be-52d9-959c-a61df2640716","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 991372coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991372coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--034e8814-91b4-583e-8e5b-fab58519d63f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9921-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9921-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e208f3-11e4-5e2f-9130-5d546ccb9a0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 992648coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '992648coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8bc9a0-8227-5c10-84e1-b548553caa9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 992717-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '992717-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6226a433-1fa9-5661-8c04-1531ba3193a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 992841coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '992841coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca1a62d-ca3a-5fb2-a71d-e0db0042eb69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 993248-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '993248-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe200659-a1f5-5752-b1f1-d349d6d9e9c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9938-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9938-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b66e63-7508-5f3b-8c85-b4a646026551","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 993818-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '993818-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--758e70d9-7603-58cf-b9e3-44ada62148da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 993964-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '993964-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a806a40-8cd0-5bfd-9ed4-e04ec62382bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 993lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '993lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e8bfef7-4b0c-5250-94ce-1712301f7bc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 994281-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '994281-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae38564-98ae-5853-bdc6-db367c766fb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9942902-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9942902-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d820260-bc8d-5d89-9333-3e3ea2ca9a18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 995284-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '995284-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1004d1e-d0db-5d55-9d18-d40642c525f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 995816coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '995816coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0df1940-07d0-5276-a714-e38ee6f838dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 995839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '995839-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe8ed40-9171-5ce8-8939-f868b3e90bc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9979592-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9979592-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34385d35-1653-52ce-9e1a-2f6d552d2a9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 99832-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99832-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2eedf5-528d-5dac-9af8-4fa0517a39dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 998329-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998329-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28e690b-caf2-529f-a86c-e7c2f2f5ad5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 998635-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998635-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d98ba3-aa0b-56fb-82c6-041d50ccaec5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 998716-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998716-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3867e9-4ad3-57a2-beea-0369e64c941c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999073-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999073-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c6c7b13-0220-5223-8f60-082a51bf87db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999285-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999285-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0e1288-8e25-5ba3-81d5-6d30624e7702","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999348-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999348-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91d82ad-98a8-5af0-a0d9-d79c13b4fb9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999378-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999378-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1e5482-8c10-5602-836d-6bc7f2943709","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999475-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999475-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62561f3-4147-5f71-8aa6-c3e22f3ec84a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 999betonlinebrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999betonlinebrasil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4eb7d1-4774-5771-aecc-2e64c749bfc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--520f930b-7ce5-5dab-9789-5c552faefe36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9digits.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9digits.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bdc7097-1e1e-590d-b304-d3c845a9cad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9digits.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9digits.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd8559d-fcdc-53a9-b2e6-96d519423d17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9e1t4c-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9e1t4c-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f7b7f3-c4ad-519a-92e7-8f174dbf1079","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9ee1c33cfd16aa4c65e6ac98fe4bc08f.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ee1c33cfd16aa4c65e6ac98fe4bc08f.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--023c9b72-7307-5622-b648-5cb032eafdd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9queens.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9queens.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401c9ce1-e5c7-5c11-ae92-6c47596a70f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9qupuag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9qupuag.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c697601-e495-58c3-9a34-7ab56b13856f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9rolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9rolls.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1cc56c-01d6-5cea-98a7-83197460de5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9secure-rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9secure-rbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8ff657-2017-5c32-b560-79a377832fcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: 9secure-royalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9secure-royalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8782f6-e92f-547b-b4df-d1ea4420abe4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9582906-4be3-52ea-91a0-1875201b8ae3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86af657f-6c3d-559e-993f-8ad8cc3f0e9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c38b01-0578-5334-bb5e-85cfa88120ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a095tfkjmn.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a095tfkjmn.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--911376e7-f01f-5ce8-9cbf-d671cf37ab5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a11548ebfd07217.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a11548ebfd07217.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d474651e-c93c-568d-becc-f04be7cf9421","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a11548ebfd07217.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a11548ebfd07217.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fae50c6-ee60-5f5b-b25d-3bbb8e50422d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a1businessnet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1businessnet.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca4d1c7-050e-5d15-b935-8f7a6a48d973","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a1c3e5b7f9d2e4f6a8b0c2d4e6f8a0.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1c3e5b7f9d2e4f6a8b0c2d4e6f8a0.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639e9680-a569-55d5-be61-7fb2893704d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a1o1harcaharca.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1o1harcaharca.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174c7e1c-3c35-5df7-8a21-8132b80f5c0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a2376c7f542d022f4d7f1b5ca0af476e.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2376c7f542d022f4d7f1b5ca0af476e.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--585852f8-3dda-5f85-a48b-b4685c8ba13c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a25avis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a25avis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6daf9ab7-798f-57be-b75e-732b9c91047f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a25zone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a25zone.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd9c923-50d6-5431-b9f5-85779940edde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a7f81715a29bd8482349157b2928ead7.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7f81715a29bd8482349157b2928ead7.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c0065f4-f76a-56ee-8fab-62f92ba4ae71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a9-chase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a9-chase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18642d6d-90dd-5aa8-8492-41cd478b3b88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a99au.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a99au.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9f8778-b12e-5e4d-bcb5-040ce5afbbf9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: a9playma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a9playma.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a548a17f-76a5-5273-8324-f9ec4013fec3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aa2000gpt-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa2000gpt-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe4f2c7-d567-54f6-afc0-ebfb3b8ca7cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aa2000gpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa2000gpt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f6961d-c3fc-5f76-b72c-ce3f2d3f122c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaa-hub.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa-hub.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a21a541-7e23-50a2-9511-63a4b0619b6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaethir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaethir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ea10a0-6cdd-513e-a40f-9f433c73fe23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aagamma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aagamma.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--353f93e3-226e-5ac7-86d9-0e9a5fe231d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaml-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaml-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9fbe02-3998-59a2-8b34-f94ccea52e21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aanmelden-argenta-be.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanmelden-argenta-be.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54993718-1a80-5b08-a366-eaf01bfcd87c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aapei-strasbourg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aapei-strasbourg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6aa79d7-925e-5cb4-a02d-db49538264c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aarhus2018.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarhus2018.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17fa70b6-3b25-5ef3-a71a-b4bcb534cbed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aarnareward.uno","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarnareward.uno']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5f7b3f-7c8f-5cd1-8081-ead9d3612c3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaspharmacy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaspharmacy.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce222dc0-0ac1-535c-8bc1-fc03fbd4928d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aattkj1n5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aattkj1n5.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73d8b9f-0640-553f-9a36-7cf535e0b090","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aava-swaap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aava-swaap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--430c7a0b-ae45-54fe-8a65-32738d4fd1cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-app-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-app-v3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b550fa-af48-5510-8834-9322fe5c7ea6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-app.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-app.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a9f77b-6ee2-5e3b-a7ea-166ea3e25b7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-compensation.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-compensation.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ee26fb-fa7b-5115-a312-69202662004b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-compensation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-compensation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d3fc63-2c3b-51f8-9b48-e6ec21d4b670","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-core-v3.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-core-v3.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a02a491-4433-51ee-afed-0f5ffa86eee9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-desktopwalletinstaller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-desktopwalletinstaller.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--372c81cb-6e4d-5765-af73-43995bac31e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-eth-v3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth-v3.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dba272b-a842-51f3-bdbd-176e81e43638","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-eth-v3.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth-v3.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f3ba09-babd-555d-bae6-24518c23003b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-eth.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39b6650e-02cd-508e-9122-eeca00578074","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-event.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-event.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9f0aa3f-6500-54e8-9267-231922ca49f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-fi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-fi.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3947b459-a55e-5907-9f77-d7b24fb15cdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-fi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-fi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--938af49d-adc2-50a9-b6b2-6bf0aadb46c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-governance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-governance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55a59c0-7e1c-553b-9044-791fa2b857fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-interface.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-interface.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acecc1cb-f66c-556b-abcd-9016511373b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-lending.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-lending.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c40bd1f-2739-5701-b4d2-b435446daad3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-petition.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-petition.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8dab1a-ba59-594f-9a32-94882d988ef4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-pool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-pool.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daadac8-e6fe-5026-a9f2-9887fe4b84a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-portals.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-portals.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a3d787-8bba-5d1b-9d41-dac6c9c35038","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-staking-markets-defi-v3-v2-aave-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0bcfcd2-8bb7-5708-9804-a88c0badf7c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-staking-markets-defi-v3-v2-aave-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bdc2cd-a375-5691-abe8-f1356cf872d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-staking-markets-defi-v3-v2-aave-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f41de09-78b4-5d4e-9fd8-b7e590183f20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-staking-markets-defi-v3-v2.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a7dde14-53b6-5b77-aad3-29741bd12034","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-v3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v3.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69b4a041-5427-53f6-af43-f29bc22d84a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--607b0791-d5f9-5830-a1da-d1dc8865b33e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-verification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4523002-14d8-5d91-80ec-d6e2c789be36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0273d4f-bfae-5d4d-8dd7-848ef41d8ec6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aave2.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave2.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf22c598-22e1-5f8b-9c8a-8fde81d6f044","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavea.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavea.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c79356-f96f-50d2-94df-cc445b46a980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavebase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavebase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4666d868-3be3-56f5-94ad-f715f093e7a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveclaim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ed5a06-d381-598e-81cf-c120ef601e3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavee-event.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee-event.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb2a2b2-efa0-5754-8147-9a41f19b8418","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavefinance.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinance.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e124466-56ed-5b98-9ddb-91b25e1b4601","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveitupmaybe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveitupmaybe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f8d663-67c1-53ef-829f-1b867b8878de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavepool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavepool.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52838f7-1d0d-5f98-b814-ee7f69c72381","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb917cc3-bbbc-5c06-bd47-ab9f48acd525","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveprize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveprize.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f1ec027-5b7b-5488-9163-1d3ade750c68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveprotocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveprotocol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9aa6da9-841a-5779-9265-514840f7574d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveu.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b3dbbf-2764-53b9-ae6d-2489fe0c6215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaveupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe04f56-a93e-522d-9b22-3a54d7470458","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aavewebrewards.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavewebrewards.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0068092d-f344-5896-970c-33258a0a88b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aawfullotofcoughsyrup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aawfullotofcoughsyrup.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9158f9-7a7f-5e74-a75a-73dd85ef392b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aax-updates.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aax-updates.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa57807-8cf7-5e4a-a83e-407ab6208747","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aaztec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaztec.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aff56ec-d318-5725-a76d-9cfc94f9cce7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ab0f91f4de802067662d381cfda96b82.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab0f91f4de802067662d381cfda96b82.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1038d69-e616-583b-a39a-9efb5aacfb09","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abacus-darknetmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacus-darknetmarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e5c17f-2ca7-5b5f-9fb2-0dc37c2cbcd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abacus-official-link.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacus-official-link.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d425fad-9357-52c3-af2d-1ee5bd97fe3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abacusmarketsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketsite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156d3d54-d1df-5abc-b7e2-4a70e93ad542","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abacusmarketurl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketurl.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ae98b3-ed32-5b0f-b746-6476498cdde7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abacusmarketweb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketweb.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ec3031-4830-5b12-93fa-6cc4359b069c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abandoned-mines.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abandoned-mines.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac5e6f-1151-56cb-b492-622da828e3df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abbacentrumalicante.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbacentrumalicante.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ae442c-c6b7-5116-9757-c9d16c9a29d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abc-ex.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abc-ex.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b341222f-271f-5a26-8b4b-36e388bd24ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abcd1234abcd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcd1234abcd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b58c42a-744b-538c-9217-d6cb8251ed1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abcd1235abcd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcd1235abcd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302b230b-48a9-5131-a66e-3319bd15c744","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abcd1236abcd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcd1236abcd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fba1632-f2da-5658-88cb-3b9ecd993f70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abcobmen.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcobmen.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5174d718-8c52-5bdc-951f-c7f5ddc90a39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abcpills.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcpills.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76fa1d9-44b0-5b72-ab03-6aefd6a7ff75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abigcandycasino-au.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigcandycasino-au.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44753f28-b702-5358-bf26-a73cb2217d1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abigcandycasinos-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigcandycasinos-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c38765-96af-51d7-8b12-e58be9e104b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abledom.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abledom.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8893241b-8ec0-5568-9752-59dc60df488a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abmaxihbxsnkxhvgyljzrlpdjqidkbexndjy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmaxihbxsnkxhvgyljzrlpdjqidkbexndjy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61701db3-45be-57a4-8b50-a698cb30eef9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abmw2025.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abmw2025.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70eaed82-878f-5130-a447-a3f7be065600","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abnix.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abnix.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ba5e1-f16f-5edc-8d60-750739ab2c2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abonne-free.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonne-free.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43cf597a-4938-5908-9c5f-faac5a581e27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abonnement-netflix-be.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonnement-netflix-be.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af96133-d567-5583-91a0-6186550fff5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abonnementsprime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonnementsprime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6111ddcc-9524-5dfb-b648-092377960cc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abortionrx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abortionrx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad04ced-9d76-5fa3-adbd-c6311e019f84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aboutcocaine.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutcocaine.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e238be6b-e564-5b26-8b89-344dc2860f49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abracodabra.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abracodabra.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa004283-9c57-55a4-b146-6231abb422ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abrechnung97.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrechnung97.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2affea21-1039-5aa7-8b8f-704ef9ec1fca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abs-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abs-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21897497-29a1-5a41-9eb0-3e5fa621e5ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abs63.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abs63.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb9c680-41e8-5480-aa96-ef6a037aaada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: absclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absclaim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e3cfb1-7629-5d36-9cc2-e2a1aa76b4c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: absclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absclaim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0c9ff1-92da-5de8-a4c3-5ed3f73e2eb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: absimoney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absimoney.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45f9810f-ec75-5bae-846c-ff1091dfe702","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abskfla.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abskfla.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce2a1e8a-196b-514b-aa5a-9512f8aa9f04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: absolutshop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutshop.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1de592-535f-507b-8b74-bb267ca6b52a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abstract-airdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract-airdrop.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b35b5a2e-6227-54c2-87f1-98db8afa339f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abstract-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bb6bf4-954c-52f7-8a66-f418b9e93d85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abstractevent.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractevent.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a80cfef0-b696-57a9-8edf-fda1b6519685","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abstractonchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractonchain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30de7077-7fb6-52a7-8a10-eeddc9a80f55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abstrikeclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstrikeclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--968bc385-1e5d-545b-9f42-0941ca8588c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abtcminingserver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtcminingserver.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2268ff5-ef1c-55d3-97b6-a9ec2aa7d8ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abu-king.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abu-king.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd55863-61ef-5b1a-81ed-d431d26e6c1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abudhabigp-support.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abudhabigp-support.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be19313-b97b-5ae0-b560-98ad1ab02927","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abuking-casino.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuking-casino.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a764dfc3-8a67-50c4-9e7d-4c1ba38875f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abukingcasino-fr.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abukingcasino-fr.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f00271c-535d-5ffb-88bc-ea87dc434487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abukingfr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abukingfr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4347f29d-2d0c-5db6-8e74-892303a65674","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abyssai.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssai.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a9d094-866b-5c2c-aee4-39f2cb60a353","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: abyssiniankitten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssiniankitten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a14007e-bc7a-5347-a584-829336649e5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ac-gret.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-gret.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--435d5502-042e-5610-a14b-38df2fc56e45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ac-interactx1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-interactx1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e8adc96-2ad2-5fa4-ad33-c8006c410b3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ac-lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e88a26-fab6-5a7b-9688-88c00fa219b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ac521-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac521-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50d178f-e9df-5ebd-b2a2-b4f74b2006f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acadaceltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acadaceltd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e2cac1-9d70-5c07-826e-2cf06148aded","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acarglobalmarkets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acarglobalmarkets.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71fe8cf-d120-57ec-8f30-9d44fbeb51d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acarmenkultr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acarmenkultr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36047247-3154-5d4c-a7ba-fe966562428e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acb-bca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acb-bca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab45a34b-ee87-5e69-afb9-ae3f53097e3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accaccess551-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accaccess551-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fd8201-0d89-5e30-b8fc-b0a67f5b5dec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accaccess627-agoda.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accaccess627-agoda.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d74a7a-717b-514c-a943-f98bf3b08765","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accedi-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accedi-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca4ccf42-8a14-5a36-b58b-5480be735374","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accept-etransfer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-etransfer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7134f25d-e978-587c-b297-4b94535195c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accept-interac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-interac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb33a85-db2c-586e-9834-7aa2dfe7449b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acceptnabtermport.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptnabtermport.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b12bc2-98e8-5cb0-8915-7af6f79575e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acces-interac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-interac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9391a9-b67a-5606-8d02-626e467e2ee0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesd-aide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesd-aide.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfac15d-9c87-52ba-ade0-184b29ff14f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acceso-clientes-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-clientes-web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c704abad-eeff-5710-851a-03d63901832f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acceso-en-linea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-en-linea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20b6a23-9eeb-5928-8e0b-a8341630d5e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acceso-perfil-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-perfil-web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1158e271-4245-5de7-94f5-0b1171643b9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acceso-santander-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-santander-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--294c2168-8160-590a-ab76-6a0346013247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesoweb-soporte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoweb-soporte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4695b0e4-cacf-51e5-b25a-5a6879797ca3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-aadcn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-aadcn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf67fc0b-45d9-54dd-bfe8-4da43079c151","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-apple-pay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-apple-pay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce96141e-4d51-501f-9176-50c87c5416d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbf11ace-8a74-5552-a569-22f97d5d6c01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8db386d-e5f9-59ce-9e9b-31bb7c8c3d33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-blacksprut-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-blacksprut-market.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ddb868-0c34-5abc-b895-df0fc3547f3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-bridge.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-bridge.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1588277-9320-577d-8bd8-655ef8c095e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-centrelink-online.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-centrelink-online.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be418fdb-63a4-56ee-87e7-2ede8ad64ccb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-duereturn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-duereturn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3a8676-7e75-5a03-b341-40edde488f98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-duereturns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-duereturns.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e0a752-497d-5b11-9ed1-87de6c0c53f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-firelight.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-firelight.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7aa3f25-011e-5c4f-b744-128e195c1997","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-firelightfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-firelightfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51baf1d6-2cc2-5a56-878c-e4c78d9c38bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-flarefoundation.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-flarefoundation.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a2ea4a-ecb8-5264-aea3-882d25539277","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-flaregovernance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-flaregovernance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74bd51c-5156-5deb-b477-33500fd5042b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-gradient.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-gradient.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5422dc-7107-510b-bfef-5ba6457a8cf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e284e4d7-9f5a-50c9-a1aa-f528c45494e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-info-in-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-info-in-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2015df9e-1de8-52a1-99f1-26f234cc714c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-kraken-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-kraken-market.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61729916-1c16-554b-8c6e-157028c1542c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-ledger.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledger.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--514892a8-5edb-51d8-84b3-6ee07432be70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-ledgerlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgerlive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a2de2-dcbe-5423-b229-b22b80367720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-log-infoportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-log-infoportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4acb67e-7a21-5fac-b291-397e389b3a33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-lyslabs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-lyslabs.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fabf2e-a30c-5404-b2c8-3eea414dfb1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-message.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-message.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb8b103-42c7-57f6-b706-2d7b754ad8c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-my-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-my-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d5d1ee-43ec-5bfd-bc27-12ab11266981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-ondo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ondo.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e8f229-1e66-5fb3-8230-306f0ff991bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-return.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-return.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65375285-6bc8-5907-ba73-c9e67f1dfa4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-review-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-review-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367adc89-45b9-553a-aa56-12ca20e55e23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-service-hmrc-gov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-service-hmrc-gov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fad594d5-d541-5adb-bf6f-7bb9dad73ace","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-stable.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-stable.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--139669e6-6291-5399-8774-45e151753532","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-trezorsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trezorsuite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c940fe-930c-5212-a427-0b563b85ef26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-uniswap-v4.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uniswap-v4.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2db3df-299a-5e82-9169-0632cef864e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e66057d-541a-56aa-9cbd-4b360a06f904","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-xrpl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-xrpl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfc781c-21eb-54a1-a3a6-785b63db36c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-xrpl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-xrpl.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede7c645-2c77-5411-a842-56a24163669c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: access-your-message-portal.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-your-message-portal.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b7068dc-dcd7-52c5-bfbe-7afbcf47d55c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessablepstcan1001.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessablepstcan1001.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352901ac-a62f-51ef-9255-8cd8f95a03fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessaccoundetails.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessaccoundetails.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f7ee1ce-d932-553d-bb93-19168259db83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessapp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessapp.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00d6ab4-c932-5190-8ee1-fff83d9ff7ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessassessmenthere-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessassessmenthere-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--372457d7-cd2d-5285-8bbe-cf6c3280df21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessassessmentreviewhub.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessassessmentreviewhub.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93076ec0-9b96-5b99-8b91-b2e5ff386797","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessato25stimulusau.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessato25stimulusau.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93a8d35-5143-5072-bbd3-ee36bcfac33e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessaugov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessaugov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a7f0b6-01b9-5ccb-911b-832384eb0f4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessaugv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessaugv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a483159b-3e6b-543b-9dd6-8106ca7b47bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessauservices.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessauservices.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595b452c-3602-54ce-8e0e-55e3f46f4c6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessbitpandaweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbitpandaweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--952d9f3d-9d7c-5249-bb29-87c7928daa13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesscentrelink-info.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesscentrelink-info.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b868d4-a810-5112-83b5-607fc6d261ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesseasyweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesseasyweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf27ae95-fe19-5164-a02d-f804b7a06844","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessibility-00return.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessibility-00return.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e458933-3eb9-57dd-a844-163bce0783ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessing-bestatigen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessing-bestatigen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9cf8909-e8b8-5ec1-8989-93779eb4cf04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessinvests.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessinvests.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72b828da-4af4-5b31-b23e-933e4fe823d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessmedicare-officetaxau.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmedicare-officetaxau.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d1cee1e-115d-5377-a974-0212fef30419","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessmyatostimulus-au.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmyatostimulus-au.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ec49ec-9405-5d33-b070-3d62bf1ce6cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessmygovaustri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmygovaustri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de372cbf-a431-510e-b19c-29abc1954c94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesso-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesso-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d50e92-a268-5538-940b-2f0e79bcc5a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesso-wise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesso-wise.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f602980-8336-5b85-b08c-b9df8ec7ab1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessoriesinc.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessoriesinc.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2917f71a-c69d-5389-9792-a2d882216a63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessportal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessportal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc316fe-7a77-57ac-a528-9e15a85fc4d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessrequestrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessrequestrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5be7774-bd78-52ea-bf2d-6e2d2e0fc61a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessreview-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessreview-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b43d3e-d73f-5a97-8f3b-ca72beb64572","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessserviceportal-services.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessserviceportal-services.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b0cd06-3fcc-5813-a14f-8512d2319a06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accesstogoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstogoogle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66765511-d700-5a05-a6f6-8b03ab6166ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessvault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessvault-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdfb41b-7703-50c2-8ced-dc76976e1c03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accessverify.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessverify.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc0eaf1-a1bb-52b8-ab55-1eec1cb6135e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accgnmine.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accgnmine.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070d288d-e432-52f7-8111-46ebe1df9396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accion.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accion.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2955435-7c46-5cc8-b442-81b734902f71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accompletedupserviceinc26.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accompletedupserviceinc26.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--042fdb21-e190-5307-9090-cac6951510e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-access-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-access-uphold.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fded2e06-4b6f-5b6e-a488-5985573a1448","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-activity-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-activity-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618b5de5-2136-55f5-9c54-e5b62845eea0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-apple-pay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple-pay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582fdac9-8490-54a1-8438-29412e0249de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-assistance-auth-560.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-assistance-auth-560.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e01ac1b-bbfe-5ef4-b383-f81557a6534c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-assistance-auth398.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-assistance-auth398.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7c13924-4cb9-5586-acf5-8e025ee54d01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-assistance-auth934.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-assistance-auth934.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e6e090-9b3f-5b0f-99a1-e80195850648","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-au-serviceportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-au-serviceportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2945dd1f-6865-5efc-93ea-fc537e891c53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-binance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-binance.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--680d51be-60fa-5d55-8f13-e72176b949d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-checkpoint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-checkpoint.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a4f0f3-f3b6-5118-823f-c9db2cee3b55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-coindcx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coindcx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d058ed-55f2-56ea-9fb1-f892aed4c419","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-coinspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinspot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd5f3b86-7b5d-5886-bee9-c1f908371318","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-coinvbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinvbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2122fb-ec32-50e4-8ebf-c0b64d887573","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-coirbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coirbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1822bf5-a46e-568e-bf7d-6a110aab1ecc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-digifinex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-digifinex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afcbf7fa-5b4c-5389-92ee-af74a1401be1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-helpdesk-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-helpdesk-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc1746e-d056-5d25-929d-f2e8f4994286","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-kalshi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-kalshi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0aec44c-21d1-5556-8218-20e5bc9b52b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bac95a6-708c-5032-bb13-5e440e63fb92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-lock-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-lock-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21db2938-b255-5539-9c3b-fd14f437bc52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-mygovid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mygovid.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c1cce9-9fa0-5d72-bb13-e569b8f45147","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-myrogers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-myrogers.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc9c765-d3af-5720-bc7e-ecf09cfec721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-ndax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ndax.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c1609d-1557-515c-a261-b559d3b7c99f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-nexo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c3afc6-6b0e-51d6-b991-d6a5b67dc16f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-portal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-portal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38975311-19fe-5eed-9dc8-7760db336338","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-presaerch.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-presaerch.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fe071dc-24a1-51d2-a6fd-21e47cb0c56c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-protection-schwab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-protection-schwab.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f39c6dc-806e-5853-bb6d-622aff8fa5ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-recovery-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-recovery-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cb29804-1f88-550b-bd9a-3dd25980e466","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-recovery-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-recovery-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--441d8f7d-aa6c-5c12-82e3-fe25da25b459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-recovery-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-recovery-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bbacf28-a1e2-550c-8acb-62b44909d7b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-review-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-review-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0fa258-933c-5ad2-ab1c-689086cb0d70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-safety-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-safety-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9d0042-a6e7-5b98-b0c1-0e34445baf36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-security-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-security-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a6c683-8993-5b23-8453-61af408b21ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-signin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-signin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eae0e8d-43ea-54a7-a8d3-b9ab9113339f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-signintoken2756124.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-signintoken2756124.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39574b69-fef8-5663-a04b-b5ff3cc28d9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-sofi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-sofi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ab77d8-d98d-5294-aa5a-94f316629187","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-support-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70015fd1-692f-5613-995e-f181d3f28d94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-support-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f67cef2-bd52-5637-ab12-b500737e7613","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-support-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9449b39a-d29e-5191-9955-731f88e4d519","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-tempcover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-tempcover.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63528389-6213-54e4-95af-3de9d9775f4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-terms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-terms.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a3c527-9073-575b-9e89-f5f237e9c8df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a4325d-a14c-5fd8-a503-b502063e9266","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-trust-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-trust-wallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8692195d-cc51-50ac-9abe-7b2f6355f24c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-update-o2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-update-o2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919399f4-b4ec-5e16-bde1-ec98f5dd9cbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-verification-required-pdf.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-verification-required-pdf.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a142f3ee-655e-5872-b1e0-f9089c7cd767","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-verify-etsy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-verify-etsy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b416b5-9816-5958-9ee5-ed0b353bbee2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-whitelist-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-whitelist-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f148d9-d491-58ea-82a7-2f4925eb0368","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: account-worldwide-electronicsnewlineomsigninidentifiercontinue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-worldwide-electronicsnewlineomsigninidentifiercontinue.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69662a3-5ed6-5beb-ad2b-8201d283c320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountcare-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcare-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8c9bfc-ab83-53e1-ad9f-da2f15367509","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountcheckcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcheckcenter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f00bb5-dedf-50b9-a53a-110e65510a1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountcrareminder.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcrareminder.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2021c5a1-bca0-5f36-bee9-7c788ca82b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounthelp-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounthelp-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--168026f5-4388-5b51-9a4b-dbe1f5fa12a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountkundendatenbestaetigung-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountkundendatenbestaetigung-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b7c9306-33e1-546c-b1b3-2283cdfa70b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountlogin-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountlogin-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6be7bd-1257-5f2f-9bff-885885f364ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountmygov-activity.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountmygov-activity.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0db9fb6e-d80a-524e-bf52-74a7b79e0b39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountrecover-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountrecover-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432033a0-5142-5858-a288-312b2dd5704b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountreview-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountreview-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae5e3d0-9196-54f0-b527-292f7f869ffb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-ads-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-ads-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad27c2c-49b3-5473-af68-c81218ba4fea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-center-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-center-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff7d37d-f745-542c-be35-e3cfaa37f8a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7253e363-d7b3-55b2-8ab8-928a0cb1bcdc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-intult-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-intult-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec1d2f0-f464-5c43-8856-a1c6192bcea7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-paxful.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-paxful.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb365da5-d9f2-5cd8-9e90-850b8a56c822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accounts-support-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-support-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f0728f-cc3f-5b60-83be-f29d2f61a2e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsa360.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsa360.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11120b4d-680b-5273-996d-ae111afbd3f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsecure-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsecure-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb919b1-db1c-5312-bf7f-00eea7333ef9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsecurebnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsecurebnc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d6675a6-cbf9-5e6c-9d04-fe6cc1f1e6de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountshelpkraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountshelpkraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9cae82-5694-52f3-95e5-54ab27eadc7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsingoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsingoogle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51361686-d018-5dac-9e79-fac627201534","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsongoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsongoogle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--495b3749-e81c-59b3-b8ff-cac3fa0b3b39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsonline360.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsonline360.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2659e5f-0cfb-5256-b476-70f39abf8ba2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsthegoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsthegoogle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9240da3-c96c-582d-98c3-fdc3c4d51b99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsupport-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupport-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--246f6b2e-d929-5ecc-b2da-8b5ef98d5e13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountsupport-td.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupport-td.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab4aaba-9861-5f00-8e71-66592bf8b62c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountup.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountup.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec764fe-9b65-568a-834d-c79fffcd4e79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountvalidationrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountvalidationrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b29889-1e99-5dcd-8276-6c6a77efdb10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountverifcu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverifcu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdefde2-f7f7-580e-920a-946e8097fd47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accountverificationrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverificationrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad5a656-4461-51c6-8573-9be48ca1f03e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accreclitedreview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accreclitedreview.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f63ce0-6a63-5960-8c70-e80c5d0ee26f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accredited26.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accredited26.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1efad8a-3c78-5452-ae90-f7be4a22fb32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accrediteddocreviewon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accrediteddocreviewon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca0f746-1f6e-548b-b257-598e7b4d6540","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accrediteddocreviewone.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accrediteddocreviewone.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f957ade-9879-51aa-8fb7-e6502805ef28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accrobaworkspacesbespdfonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accrobaworkspacesbespdfonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2f1c51-5ffe-5806-b711-7896f42522fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acctbkeasy.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctbkeasy.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58d5d8f-04ea-50a7-bcbc-44d77af0fb7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acctrecovery.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctrecovery.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d396603-1944-5d06-8b63-d0fbfa6352a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acctsmgt-linkedin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctsmgt-linkedin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14a8813-9ac2-531c-9965-ba568ea3a3e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: accueil-mondial-relay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accueil-mondial-relay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a2a78c-1803-56bd-b52d-68b7a9fb73be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ace-core.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-core.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc4c0be-e962-5a36-9ee9-7a38b771f194","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ace-game-casino-ar.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-game-casino-ar.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d4a058-0480-5e0a-ac30-7efee27708d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acecasinoplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acecasinoplay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b504d0be-c97a-5a21-ba31-d086da796557","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acedernetbank-24h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedernetbank-24h.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea24c420-ca8b-5942-b1c8-87e845041b1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acedrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11c5898-70e7-5412-9013-26ea6e59d764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aceilt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceilt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f87829ed-ab1e-5384-87e6-29982144b5cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acelogger.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogger.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e032360-5d90-5eef-acd5-29f9826f6327","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acelogger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogger.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbe9d26-1c75-52d6-8ac3-76c681fb8294","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aceomail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceomail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b611608-5f6d-5a77-bd60-6dea22f051d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acepresale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acepresale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a8f7607-4177-5c9c-9618-9fc3f7b52b71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aces-inc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aces-inc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dde6e7c-9398-5d82-b3cf-a3f1a2c6f85b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acess-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acess-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f36f360-1c5b-5b24-9c6f-cf6d42529f20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acess-my-service-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acess-my-service-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80005b4c-7fc4-5e19-86eb-69ffcb8399cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessaccdetail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessaccdetail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb59710-ce33-514c-a962-3ef552c33e51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessautri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessautri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42424056-27a8-526d-8d50-c331375ea3d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acesso-cliente.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesso-cliente.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ebf346-fcfe-5bae-9928-3207dc1f8a09","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessodosdespachos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessodosdespachos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68b97e86-6893-57b3-a39d-72ab821194d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoempresa.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoempresa.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfac09de-bc26-5e15-af69-9f6bef3f3a37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoempresapjs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoempresapjs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ec5335-ae2e-5daa-a880-c8d208b71fee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoempresarial.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoempresarial.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--965057a8-8d1e-55d8-bf2b-270fde9cd387","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoidentificado.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoidentificado.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f5551c9-fc80-5d15-ae86-f4506a76d416","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessonetempresas.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonetempresas.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a22f86-7a3d-5d35-995a-4e1276f1991f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessonetempresaspj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessonetempresaspj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01d8201d-a94a-5ab6-a58d-339c97a287f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoonline.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoonline.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbdb220e-94b4-5e88-bc3d-f70fcb126de8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessopainelempresa.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessopainelempresa.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e154009a-8cfb-5529-b1db-626148ef7891","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessopainelpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessopainelpj.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e65e8a-0810-5b9d-b64d-050535df3f34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoparanaberu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoparanaberu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa5ffdf-91f6-5f0b-8a92-44cdbbf80089","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessopjdigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessopjdigital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0da87df-d4e3-5b99-a020-c197121732b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoportalpj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoportalpj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb5fc003-5678-52db-9637-58c6e8ca5aa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acessoportalpj.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoportalpj.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7eec0c-2955-55e8-8753-d415143e94a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acesss-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesss-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b741087-849b-5aa5-bca7-713a9244f8b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acewalletdrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acewalletdrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b401f845-550e-5609-a68e-848b7d9dc4d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acfi-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acfi-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eab05c6-d1af-57d5-91a3-cfa42c2bd339","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acfi-presale.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acfi-presale.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecfa0fb9-1432-542a-a881-1e967f74c579","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acgvtx25.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acgvtx25.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3508576-1847-52f8-a2ae-420ac33dc09e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: achetersteroidefr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achetersteroidefr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4c396f-4c90-512c-ac64-cbb2c38f6d75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acheterviagrafr24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheterviagrafr24.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec757d7-f607-532b-b344-c32a390f53d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: achieveatthreads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achieveatthreads.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80052c37-1542-587e-9208-828f45ccb731","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aci-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aci-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4396ed6-0dcb-561f-98c5-97d125036f20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aciclovir400mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aciclovir400mg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842096fb-8312-5de3-b6fa-8512ab1526ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acikekranbasvurulari.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acikekranbasvurulari.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864cd460-addc-5488-8fb2-41cb55ea1d8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acikfirsatlarim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acikfirsatlarim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba19c864-dca7-5b21-a675-eea5a1cefedf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aciknimetzade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aciknimetzade.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4034bf6-08ef-57b9-9e1d-159263de54dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acitininfornconfirmming.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acitininfornconfirmming.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6a8006-a995-59c6-9350-2cdb8e1ee137","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aclamcamerastudiosrental.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aclamcamerastudiosrental.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe5888f-00a6-519c-9801-8cfe23022db8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acllfq.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acllfq.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e37d011-8cd9-5d82-a081-524b3bbbaac9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acmeconf.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acmeconf.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e2e584-f5da-51f8-a8f3-a9f2d85c98e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acneeeeeeepteepepepe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acneeeeeeepteepepepe.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0707c2e7-b8be-5843-88bc-857b0e2fe1b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acolytai-tokenclaim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acolytai-tokenclaim.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7641156e-55fc-5322-a002-679c8e6b85b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acom-edumed.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acom-edumed.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b192970e-6477-5c25-a52d-2cde49d0061b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acopiencia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acopiencia.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db684dcb-0860-59fc-9f78-4081eb525b96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acoraapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acoraapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--148d1ce8-02c1-5195-ac0c-28ea6ec17589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrdrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrdrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa782126-9bbc-5656-9b2d-3ca1db296f36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrobat-digitalsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobat-digitalsuite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12b321b-e5b7-55c6-86d2-6f4e740408d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrobat-set-up-update.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobat-set-up-update.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a0dd57c-f448-51aa-b074-e01ca69d1c0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrobatpdf-suite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrobatpdf-suite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb4d322-9c0d-5ca2-9621-c75e01c7505a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrossprotocols.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossprotocols.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2418bd3d-74fd-5f2e-bacb-804771a724f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acrossrelay.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossrelay.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706d6c6a-86f0-58e2-8549-0cc8c775f1f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acs-24-pharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-24-pharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab3b19c-8bb6-5604-9da2-2bb3b3736a15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acs-24-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-24-support.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a821fb8d-11e3-5806-a213-506500b1b479","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acs-24.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-24.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54a7132a-26c2-5fcc-83b0-eadc5c46d01a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acs-pharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-pharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7aa55d2-f7be-56c1-b5dd-f808b81be644","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acs24-pharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs24-pharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ae3970-e242-5564-a7e3-cbb3929e1409","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acscessveri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acscessveri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d8e6615-3699-56a9-b672-2f3ccb800b06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: act-allocationcanadiennedestravailleurs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act-allocationcanadiennedestravailleurs.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd16b560-151a-57c2-a243-a97aced1b9f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: act-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c0fcce-8d9f-5141-8d3a-994c13ddd692","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: act10nable-a2t25.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act10nable-a2t25.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a117ea0a-f86e-5ae9-9e1f-8f706f1f17cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actamexicano.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actamexicano.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa4e285-9293-5030-9d45-d506e7cb8e55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actamexicano.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actamexicano.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7efdd647-4eeb-56c5-ba4d-17c97cde06cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actamexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actamexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--441469c2-3be6-5d14-be38-05a2008221db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actingstandup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actingstandup.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c868cdf5-8b72-56bd-8d6b-b5b530acaea5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: action-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a719b3-e837-5253-8590-d4f68b724b23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: action-bybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-bybit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d0a196-26f2-5e1c-bb67-6ab0f4775849","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: action-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc504a85-0b62-55a0-923d-ce96bd81cb5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: action-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--954e136a-bb4a-5585-9d9a-4504c721bf30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: action-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a140ec6-f747-514b-88f1-d8a2116046ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actionappeal-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionappeal-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d331c7c0-a4c1-5491-ab57-0771d639d3f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actioncollectif.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actioncollectif.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf2e820-0643-58b1-a736-e3a30788d593","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actions-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actions-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b3a2ec-1110-5976-88d6-5072e560e320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actions-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actions-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666da15a-797d-57e0-a668-a5837df485f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activate-coinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-coinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb643eb-3058-57f9-ad3b-3e4a22b89fbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activate-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d6d465-87b3-5b5e-8653-c76efb498021","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activatemycoinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatemycoinbasevault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac1de56-d094-5989-a601-b124dc0271df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activatenoda.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatenoda.dev']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac2cbb3-b10d-5440-8dfc-a2f9157b1fda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activates-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activates-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f91d453c-7ab9-5bd5-8abb-1a802108caf7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activatexrp.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatexrp.dev']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d105a288-150d-5c06-b547-c23d4e77b4b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activation-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2602e341-a3d2-53b1-9fdb-a2bc35a068f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: active-cases-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-cases-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6c78ca-5dfc-5f1c-afad-0fa638c4314d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: active-centrelink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-centrelink.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0b83ee-964d-566c-8160-cd9faa8ef424","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: active-related.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-related.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e205be8e-2dde-53ff-8bea-ff3be1ba91bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: active-zkpass.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-zkpass.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ab2837-ecf7-5192-896c-2328766b5f58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activebasenet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activebasenet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7776c18c-a1d0-5265-a550-669609124d4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activepumpfunlivesol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activepumpfunlivesol.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--991ca669-9a96-54e3-8ce7-04afd70a93af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activeswiftamend.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeswiftamend.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f407c94b-59d0-5b93-9f84-f237b463a72c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activities-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activities-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2a55e1-da6e-596a-b998-7df4cb6b0b43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activities.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activities.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7894b3a5-926f-5177-a896-d44b975a6171","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activitiesclaimrevise.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activitiesclaimrevise.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cc5cba-3dbc-5e4a-85f6-338a3f4ee333","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e00b41-65fc-5779-ad9a-25eb7b07025f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b29f22-9c6a-5b1e-a4bd-10690cb65a27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-claimreview.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-claimreview.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde1b56b-baba-5718-a7da-3f8e7467d0fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-claimssupportinfo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-claimssupportinfo.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8386fed2-b5d4-519a-b5a6-979cb02617cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06021aa1-bef0-59c6-ae88-706efbc3cdaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86769320-cb40-52e9-bc71-430a925e0eb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activity-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5636d0c2-2a51-5ba5-8851-e359d32f7842","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activityclaimsinfo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityclaimsinfo.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30dc2920-b536-551f-8a15-38b775958962","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activityportal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityportal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c523ed31-f201-5ef3-9ad6-15c07a3da7ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activityreview-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityreview-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b10828-7775-54ca-a10c-ef188f0897ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: activityview-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activityview-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcd2761-97f0-54a0-a36d-53eff94c9e68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actorestandups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actorestandups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b10e52-9e42-580d-aeb4-ae9e8fc21e23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actorstandups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actorstandups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e903802d-6a36-516b-bd29-6418e5ba7335","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actualizacion-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizacion-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8512362-a228-54bb-931d-7614382d83b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: actuaya.sale","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actuaya.sale']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9370826-82ba-5254-8840-42d87cde0ed1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acutoborsettura-it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acutoborsettura-it.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c81f4fe9-7870-5aa9-aa97-35ec2b71a6b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acutopatrimanza-it.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acutopatrimanza-it.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1cc9a17-a0b8-59a9-961d-8ae6d2d1714b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acwdrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acwdrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e106a4-e3a2-52d9-9557-2a0cd2ad3ce3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acxiom.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acxiom.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2348dc7-f3ca-5807-9aea-5b92f01d558f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: acy04.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acy04.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b70fe7-dea1-5b68-ae0f-e8f8165d673e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ad-account-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbccb6d-220c-5926-9b24-f1f3103bcb3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ad-usdc-bridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-usdc-bridge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de9830b-a9de-5506-b872-dcc6e64507d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adaafinancial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaafinancial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51b08e1-ad53-58cd-978c-b04df0da9057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adafrpool.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adafrpool.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e97f73cf-4524-5006-869f-b92371f375a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adagives.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adagives.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eea9c24-6dc9-5a1a-9c5b-e786bec7586e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adamsemergencyone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamsemergencyone.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--940ed379-f4e8-5285-98d0-6ba6285fcc6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adaozpool.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaozpool.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6e3524-e40d-568e-9ea1-d24f45a55901","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adaptwisez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaptwisez.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af29073d-6986-5693-a77f-f5b6a0225c32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adblocknoads.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adblocknoads.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4da9b71-a943-5ae5-901d-7312503c29e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adc-infoaktualisierung-matter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adc-infoaktualisierung-matter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712ef56a-8ea6-59b7-a5ce-4ed72d0dae5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: add-metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-metamask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccf28dbc-f388-5b3a-91cc-31df727ddf5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: addicted-sol.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-sol.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e05e5aa-987f-5e0e-8f4c-78045d457578","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: additional-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additional-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6073456d-f892-592f-89f4-7f6affd47c70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: addlist-moonshot.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addlist-moonshot.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e01a19-2515-572d-92f6-78d6f6f19257","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: address-analyse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-analyse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a1fcf4-f3ae-59e0-871b-2b24169890a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeccocampaign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccocampaign.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--128bc965-8235-58e5-a47e-7db8ce56d057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeccointmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccointmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8bb9759-ff93-5f33-b054-b12540f0dc4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeccooutreach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccooutreach.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b35d63f8-3e52-5188-9bf3-80f03c0da4c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeccoworkbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccoworkbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b1c22b-544c-518e-88aa-f4a111b8056f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f6f66c-da91-591e-92f2-28dfb20f5b05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adelaidecasinos-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adelaidecasinos-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fd5e87-8418-5676-bf49-193b2b7ce78d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adeptdentalshafter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeptdentalshafter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b912e49-ecf6-5cb3-ada8-43860de74494","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adexdashboard.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adexdashboard.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e2d996e-5cae-5cb5-9679-a42224307e6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adflow.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adflow.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd9aa21-6c64-5060-9c53-020ef3b002b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adforge.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adforge.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb985f5-de46-5956-9ff5-6ab05e8650da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adguardbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adguardbox.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0985e196-ae20-5ef5-801b-5ee0506f8221","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adguardtools.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adguardtools.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--470ef22d-4ec2-5a96-9adc-c52481717933","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adhdpharm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhdpharm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--346f1b75-4c66-511f-b61f-32f887f3056f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adidas-terrex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidas-terrex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c905a1-a2af-579c-ae00-ccab91bae8e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adigecapitentrocommercio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adigecapitentrocommercio.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--848399ff-91be-51d0-ab9e-deec27d7813e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adjara-gudju1.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju1.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96e1bba-f359-5a44-b970-6f86571c5e0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adjara-gudju2.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju2.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d92492-95d4-59a5-8bea-ee09497c92ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adjara-gudju3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju3.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf8ee73-68fb-5814-9bb4-42c9d8990b58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adjustment-wiquoepo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjustment-wiquoepo.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32822d9a-6a86-598b-9e21-f91a70a3a5f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adlerundsohn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlerundsohn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef7289b-ecfa-51e1-af33-e9af03f9d81b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adlidosyakontrol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlidosyakontrol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0336344f-773c-5006-81af-9a5a74066035","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adm-xrprestake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm-xrprestake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59dd9999-da93-5c00-972b-5c0989db0fb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admarco.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admarco.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd527129-a2de-524f-af01-503df7e2df97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admin-extranet-information.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-extranet-information.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7f4b7-2413-5ca0-b174-5e327bd0d300","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admin-reservationcheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-reservationcheck.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ce39c4-dd0c-5f18-973d-0538ca1383b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admin-web.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-web.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d32656d-5e2a-5450-9d6e-a1d6eb637756","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admincibcalert.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admincibcalert.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bdbcc9-7d41-5ae8-9e07-a4a00bb2049a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admindao.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admindao.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f8dfcb-0cf4-5854-b80f-30a5b1ea77c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adminextranethotelpms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminextranethotelpms.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df1bb259-5731-5f69-b9d8-fff5e87f6872","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adminka.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminka.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941973e8-d884-5a67-9c70-f85f692e2efe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adminteach.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminteach.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a7bf2d0-3611-5155-ac94-a412cf02c4d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admintools.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintools.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a0d261c-76da-5cbc-92eb-c2c093c84e89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admintop.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admintop.cam']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0322f73-bbe5-59d1-961e-01ad4c222c2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admiralbetpremioit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralbetpremioit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2119679e-6baa-53cc-9bd2-47a7b1bf9c54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: admiralcasinouk2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralcasinouk2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2309c844-b111-5053-8493-ef69ed438366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adobe-photoshop-download.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-photoshop-download.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afd81f0-7845-5f29-b0b8-c2959028f402","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adobe-sign.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-sign.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16e12d4-15a1-5c03-8ddc-5a63ed6c6368","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adobeartsia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeartsia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dffecdc-1ed4-54d3-8bc5-a5de9264c0e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adobedocs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobedocs.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b3ce30-9356-5b73-a735-240f65020715","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adoberedearaccess.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoberedearaccess.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b70cd6-71f4-5a0d-a64e-c7db248a3437","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adopter-opensea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adopter-opensea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9e432a-576c-520a-a8fb-e379c0c83922","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adopters-opensea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adopters-opensea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336a5a4a-78f1-5f78-9b09-2baa5afd693a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adoptmekorea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmekorea.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1887d6-9fe8-5476-b7f2-b2a891cf0790","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adorabit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorabit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--958d3203-858b-53bf-8fa0-1712802fb57e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adperformanceanalytics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adperformanceanalytics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45eae1a7-19eb-595b-b0cf-b14484306acc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adq67.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adq67.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338c057d-cd61-51e0-a7ee-77e98e3db3eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adquramexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adquramexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d69a27-5bd0-5a9a-aa97-beb5c36f9a73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adrasteapool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrasteapool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dba9050-fc5f-57f7-b1fd-e4f75aa5ce1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adres-tekoyun.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adres-tekoyun.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e70a7c2-293c-5ed3-bbf6-147550e65ee0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adrese-girisleriniz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrese-girisleriniz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67589f1d-053d-507e-b0b4-1e58111b8823","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adresgirisinimiz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresgirisinimiz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a7f4ad-d11b-57d2-a671-70d99a4f7da8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adresi-ultrabet.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresi-ultrabet.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f156b91-1e4e-53f8-9094-d35f9b525490","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adresimgirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresimgirs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a9c26a-7213-58eb-b6fd-0f551771c90c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adresipadisahbet.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresipadisahbet.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0973c7-0a3b-5851-92b3-55ab2b3ffb5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adreslerimiztr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerimiztr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3429415-12b4-539e-a2f9-7502c3b63fbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adreslerinizim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerinizim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417402e0-2410-5991-9b64-fb97b18c4766","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adreslerri-casibom.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerri-casibom.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d6d85bd-fc54-5b3a-87b3-6da338b56265","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adreslerrr-casibom.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerrr-casibom.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aec3d86-3e6c-528b-9776-e689fa23d79c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adressdengirsyapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adressdengirsyapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc7196e-2103-534d-8426-f2f73ebea1d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adresyenigirs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresyenigirs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbe00b7-3f96-5801-97d3-54f63bc2275b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adriogelattiblog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adriogelattiblog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f8236ae-e449-5804-8a55-e72c46bea91d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-account-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-account-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1bfbfa2-0a99-5779-9107-e42145a3ef8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-bingcpc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-bingcpc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63490525-4782-5b5b-b5f6-bcdd9b658421","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-google-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-google-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0fdf80e-5647-53c5-9d7f-41bb5764c6b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-microsoft-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-microsoft-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4102794-fd2b-53cd-bb46-fc4435a1d8da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-track-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-track-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e937bfe-701e-5d09-a626-d382f924fee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ads-trackmicrosoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-trackmicrosoft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b7b5952-6505-528f-8b6c-169c20f97c3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advanced-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422c0282-8578-5aa6-9bb0-6bd709f82f65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advancedinnovationpartners.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedinnovationpartners.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--408481cf-86b6-58d8-841a-03c236f42a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advancedrouting404.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedrouting404.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c94892-e2cc-5883-93f8-1c734028f188","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advancedvpnprotection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedvpnprotection.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad74e23c-3060-50a7-b26e-1fbcb465182d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advanzia-deaktivieren.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanzia-deaktivieren.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd9d31a-7e67-5c48-b4d1-03cddda4bf6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adventurergsdfjg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurergsdfjg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62921860-2c8f-54bc-8237-1bc0ef7450b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advertisingally.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisingally.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1acd4c-359f-50f0-bb85-ba292a6c2708","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advise-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advise-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0395fc-1f76-5711-81c1-aa2ca1d8c665","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advisor-hmrc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisor-hmrc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5e9455-bc05-5075-b2a1-e514e3864c9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advncdstep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advncdstep.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cd7073-6233-5e1b-8a8f-cc358b650e29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: advocatesthemis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advocatesthemis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7047759-aad6-52a7-ab14-f67960d0fdde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: adycapital.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adycapital.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a138ab-2483-5884-884f-8d05fbe1dd6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ae2s.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ae2s.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a453554-90c0-565d-8c46-047b92846513","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aea-investor.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aea-investor.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca822f5f-10a1-5200-9b55-e95d22d65fcf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aecdrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecdrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b79a8e5-bae7-54f3-baae-ede2f47b4b03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aecvs005.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs005.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c25b4b22-452f-5193-9c3d-f0e04f518cf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aecvs006.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs006.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1959ef0-7bae-59a9-94af-0f441965fe3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aecvs010.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs010.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37add55-fa91-556f-996d-1f5107cf2dd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aegi.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegi.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa891763-5965-53f9-8bed-d460cdd38b2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aegoz-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegoz-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1279e7d1-1ce4-5375-81d9-c532efda9c5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aehtir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aehtir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3191ff3c-0d72-5dec-8886-062b85d3f092","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeils.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeils.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e3841b-4c0e-5396-8adc-250a91f0590d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aemtron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aemtron.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35cc65e-a523-5d7e-ad80-334f3abbb269","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aen.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aen.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72832074-46a9-5d51-9884-bd3c56de1ed8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aenvixitalia.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aenvixitalia.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2639a0b-25fc-50cf-b387-1baf409bf766","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeoyod-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeoyod-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0af53c0-9b52-5ec8-bb9f-a8b18e49cdb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aepchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aepchain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d0eedae-c97e-55a0-b110-d394059597f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeradrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeradrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ec8575-812f-5f1d-8b1c-3c8d8f477d4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aercdrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aercdrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9487e69-46b9-55fe-b066-4260e65f8353","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeree.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeree.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec32af4-458b-5a20-98d4-cfd904cd184e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aero-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6122e7-839a-52d3-9fcd-e63980e65f81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aero-drom-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-drom-finance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ce33f1-8597-5dd5-acd6-6e32d0cdb7e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerobasedrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerobasedrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f970316-651f-5555-82b6-3c3d1e85a30e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerobet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerobet.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4c3ed2-de88-5233-90de-10b8a8595985","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerobrorne.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerobrorne.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d560f593-2c68-5ae7-87d7-10a118c42721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerocdrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocdrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e51e38e-e89c-5d1a-9320-10303fcf9bba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodfome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodfome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--768c9dff-3561-509e-a291-c2480e54a8a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrame.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrame.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b5a88d3-ca73-54e9-ba9d-205625ec2f44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrarne.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrarne.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd56e5e-208e-5c91-8889-5925251206a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-claim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-claim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98763fb5-06d9-527f-beb2-57088ece0a1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccb360fe-98a9-53c8-96f2-c238548affb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-distributions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-distributions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9179a24e-2b8c-54ad-88f9-4bb0d942f588","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1e52b2-71ea-58bc-a3d6-87eb96c39d55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-portal.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-portal.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f95d1d-e7a6-51a0-b16a-fee7c4e2467c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-proposals.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-proposals.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6450f4ac-7e86-5659-95c6-7a51fc5288f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome-vote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-vote.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a208261-fd78-5cc2-8acb-e55cf077b27e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3e9c69-a5d2-5ad7-bb81-a6bcbe46c222","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrome.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f323683-36f4-56a4-81ac-419687f890d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodromebase.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromebase.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c082ad-a0bd-5c3e-a281-b8ce7efe4ca3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodromeclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44f4d9f-2a25-5d3b-a63a-4982c6df57d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodromedep.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromedep.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b49ba5ff-1f99-5fe0-818c-b3bc6e50bde9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodromeservice.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeservice.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4db1633-257d-5212-bc35-8bda8bf451f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodromeswap.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeswap.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80090f4b-c546-558a-b9dc-b4ddafd21202","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrones.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrones.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec850d40-7b17-51df-ae21-f4b18a66abad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerodrorne.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrorne.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a4d01d-6c8c-5123-b897-5cd18d7b6a3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerordome.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerordome.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f92716ad-edf0-50fe-a904-20cd8562494e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerordome.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerordome.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--662ad5e5-d4c2-5109-bf8e-a2cf0504b0ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerordomes.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerordomes.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd4a430-52d3-5438-a129-7a9cfb84e0f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerordromez.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerordromez.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3f901c-624a-5012-abbd-fd7c5742d8a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aerotoken.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotoken.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b66871c-c9af-52e2-869f-de3d572b7bfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aesthetesrewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetesrewards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a853074-373a-5a66-bb88-d5e8a0f45b3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeth-airdrop.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeth-airdrop.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb5e2fef-7310-505a-af04-97afc1308d67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethelbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethelbit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be151b38-a793-513d-91a4-051abecce181","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aetherixcore.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherixcore.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a82023-a3da-5ff2-9ff3-457abf9a6d9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aetheronpulse.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetheronpulse.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc77ff2-50a9-582c-b604-71bd0f9437a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethers.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethers.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9492fe1e-dd89-5cfe-b309-342bbfefe2b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethersense.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethersense.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f913ba-2f6e-59b1-a25b-28088ff3fe9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethirclaimportal.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirclaimportal.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10087015-7e84-55eb-9c75-36f0af24de60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethirreward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirreward.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6e7809-487b-5663-a5ed-d8d592625f4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethirs-bonus.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirs-bonus.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c19f76-ed18-5fb6-9e49-96a097aefcc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethnode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethnode.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539593fc-531c-524a-9878-99fcdf266795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aethrir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ef3efef-9262-54af-b393-a24ba6c550ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aetihr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetihr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15025fb-9c92-5cb8-ae27-591ecce6ee6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aeuyxo-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeuyxo-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46031b6-6f91-5292-a73e-61ca65522e23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevo-event.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo-event.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3870c35-d16a-518b-a12d-66994431f95f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevo.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62d9337c-729c-505c-bd04-14566de8ed33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevoeco.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevoeco.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3153bf62-a086-593a-8493-5f0f6a8512d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevotoken.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevotoken.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37df1ff6-108b-5db4-87c2-052c2d674f76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevotokenclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevotokenclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1eab252-bfbd-5265-8c28-3edc70e88dce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aevyrixapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevyrixapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ba51bd-a291-5bac-9f34-0a672ba8a23f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afaxen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afaxen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1362b4f0-b387-51c8-b1a1-233fc75aa0c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afcovhpyvt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afcovhpyvt.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--599cbccf-4b3b-5c3e-afad-1c34b1910671","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: affagas.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affagas.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80698ba2-e1be-508d-bf6a-8640d839f40e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: affiliate-stargate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliate-stargate.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051fe003-91c3-53c7-9218-84c0f18b2b37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: affinexisagent-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affinexisagent-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7d8dbf-678a-51f6-8344-b4d87fef7446","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: affordabletractorbackhoeservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affordabletractorbackhoeservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50695a7c-57e3-5989-8be5-a4eaf1a26046","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afianzon-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afianzon-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02c2d6b0-a317-5a73-bfe2-2226fce7eb25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afkfun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afkfun.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d5c6048-d417-51ba-a76a-a13ebe61310c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afkly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afkly.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8069b17e-dc84-5beb-9776-446fecd97156","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: africa1x2.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africa1x2.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d247a2-1a2e-5ecf-852b-84eb29400891","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afrinex-ai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrinex-ai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ffaca9-9c2a-531b-b4ad-2f4830318b98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afriquantum-x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriquantum-x.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e62348d-de6b-5d0e-96d9-29598062c8e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afrisoft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrisoft.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a701a6c9-2c14-594a-b3e6-90474bc6f41b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afriwealthx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriwealthx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfba32bd-139f-5777-8707-e112e436914e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afroparrot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afroparrot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d7b774d-366f-5fef-885d-2afbee292c74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aftajesten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftajesten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a34c8fba-c999-51b6-8421-3ec4747b3ea5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aftem.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftem.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab4100e0-f7bf-5eb9-a873-bcb2d5504be5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: afteraffectahelp1098.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afteraffectahelp1098.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61825d7-8160-5b84-9924-3e44b622ab23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-airdrop.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-airdrop.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb34203-f4df-53c5-8c8c-6def0b65011f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-airdrop.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-airdrop.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--504bad89-73d5-560c-a189-aca72d8ae60a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-claim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6737ae0-afe8-5a88-b8ab-ff78dbc90d21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-claims.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claims.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cef14e3e-8145-5581-9499-ffb20ff11a22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a1329f-8194-5219-8537-d564db586518","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-proposal.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-proposal.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--008c1f4e-329f-5eda-a747-abb995d9c89a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-register.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-register.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22920d9-30ce-5a2d-a39a-4b1034ab9d41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-rewards.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-rewards.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5706661-4107-576b-b8cd-af9dc0ae4061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-rewards.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-rewards.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8626b2b2-063e-5c38-ae65-4bf7d11a0515","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-swap.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-swap.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd310f0-8633-5568-a4e7-d6a715aa31f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-swap.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-swap.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b77d02-ea90-538c-ad55-a1a4bac47cdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-swap.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-swap.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11a1eae6-acb6-5c75-925e-a14247e460fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-tangem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-tangem.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc550f2-d574-50a2-8565-78f23ebbaaad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-token-swap-jupiter-exchange.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-token-swap-jupiter-exchange.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69b6f7a1-4718-53ea-8d8c-d0774e0b4a6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-tokens.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-tokens.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9769b4a7-4001-5988-ae9b-024b888065a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-wallet.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-wallet.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec85042-b387-5439-bff5-8d2519c70678","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ag-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-web3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--641a0dc1-b903-5431-9d06-8b7e73122ee0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agaar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agaar.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f564e62-b545-5a83-8f44-cd9ada36d91b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agamemnonsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamemnonsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca1a70a-3728-545b-9d42-25682bad045e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agdosve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agdosve.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--972050c5-f4d2-5424-b1c8-5b9e15d68c10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agect.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27cac0d8-8e37-5825-b31f-a317915d7840","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ageeon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageeon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2123abd-8b20-50a3-a16f-214bbc6106a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agencedurevenucanada-aidefinanciere.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencedurevenucanada-aidefinanciere.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3bb855-30ee-525f-8193-1192be0588e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agenciatributara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenciatributara.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d364062-f45a-59c8-8a5f-c50507d5587e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agencjaartur.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencjaartur.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87391a13-f8d9-500f-953d-37fddbc41f41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agencyecomltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencyecomltd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0873c7-b073-5d1c-9881-880317465b76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agent-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe12534b-1bb8-5478-b33c-7c7a5fbf92d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agent-cibcalerts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-cibcalerts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c8c110-3982-5990-bb0c-da197a8f84e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agent-layer.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-layer.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94dfdfbd-1c8a-550c-9a62-078d0ce2f52e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agent-support-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-support-cb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc4ae77-913f-5a1a-93af-6ea6c0c974b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agent-support-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-support-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d992a5e3-f488-5b5e-b7c7-eee22c494994","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agentassist-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentassist-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7eb1e1-9f2d-5202-b383-b36ac784b930","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agentconnect-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentconnect-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecd8770-054f-58c6-bd0b-87d0878bcf4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agents-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2456d5c9-c93a-5529-86bc-32bc805d2ea5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agents-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b45429fb-8071-516d-b855-ba59ee0fd9b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agents-olas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-olas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--342a05d8-1a5a-5cbc-8d9a-8ae2ce9d6ece","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agentsandbox.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsandbox.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e910669-8768-5b5a-bb36-489d71667a73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agentwormhole.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentwormhole.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a722e6a2-981d-5a4c-be7d-13cd52e38421","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agentwormhole.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentwormhole.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41eb04ee-22b7-5c89-8e74-2005c800a5d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agenziaentrate-rw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenziaentrate-rw.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8dbfd60-e43b-5915-8cd7-ae9292c2c59f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agenziaentratta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenziaentratta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d787ed3f-9b28-5667-a926-a1953d5b5a4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agenziaentratte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenziaentratte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706c25ca-6efa-54c0-9fee-c782261757fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ageshash.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageshash.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184c6f02-c112-547a-9567-c9a30c790aa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agffxfghssc-isuxh.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agffxfghssc-isuxh.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a094c9f-e471-565b-a6c4-eb92953de23c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aggiorna-creditagricole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggiorna-creditagricole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad187f6f-2a40-5a10-be6c-a02ec1938322","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aggiornamento-sow-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggiornamento-sow-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d040ee7b-1ada-5dea-97e9-2fe9fcccb261","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aggsystem.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggsystem.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751c692c-4b7b-5307-8b29-d29b4b5c120d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agilidadecompativelgo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilidadecompativelgo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6248d3-c660-5b59-bf49-514558debd39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agire-maroc.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agire-maroc.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea4c8e4-ee62-5d1a-a47f-980c8b97f987","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agix-airdrop.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agix-airdrop.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acaf6a5d-c933-5f7c-be53-d68355ef9f8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agix-protocol.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agix-protocol.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--847694f4-0681-518b-a589-da984697cf5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agix-reward.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agix-reward.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--302e9820-a2e4-510a-9227-94afc9515485","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agixgift.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agixgift.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a3c102-ae9e-5917-ace8-747985156522","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agnzetrta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agnzetrta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b764e37-f0c9-5095-9e99-f17f2a23835a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agorafinanceai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agorafinanceai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554ef482-e6a3-559a-bc9d-cb6d471ab4ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agorareward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agorareward.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16a2570-7cd2-50ef-ae7b-54da867d40b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agprotect-sch.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agprotect-sch.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b9df021-ed42-5bc1-9c8e-67d7326339a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agrafim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrafim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e84f19-4c5d-5cb7-ae54-ac890f32b5af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agroecopolis.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroecopolis.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acded47c-d616-5bf0-b823-ca744a83b8b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: agroindustrialelpaico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroindustrialelpaico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c61d8ee-bfe1-5e87-a55d-051333d8f9a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ags2ac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ags2ac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d8f321-33f0-5c05-a9e2-a028cfedee89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aguaenforma.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aguaenforma.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb1b415-e1d7-5337-9ac8-d028724707c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aguerocasinoplayar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aguerocasinoplayar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d424c195-43a2-52fc-a8ad-8db742a55968","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ahealthyman.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahealthyman.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539394dd-491e-59be-8672-11c6cdcae9c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-agents-trading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-agents-trading.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a414bd00-185f-5881-a95e-4c096eba4e0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-agents-wallets.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-agents-wallets.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22c4323-52ca-53f6-9fd6-d7a5dc8cd413","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--190ee6a5-ebfe-5c6b-9577-db1a9f8ed9e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-nexora.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-nexora.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--184eb8b0-4869-53e9-8fc5-f92c069062ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-presale.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-presale.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ef7c21-5271-53f8-bb83-ebdb1216fe92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-quant.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-quant.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d0d9e6-eccc-560b-b1bc-8dc809d5e398","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-titan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-titan.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d18a1b-027c-560a-a699-52dc46172487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-trader-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trader-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c87a45d-0fb3-5c50-acae-714b349ffbe5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffbc48c6-9902-5fb4-970b-1f5cc524ab5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai-wallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-wallet.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ea6372-cd6a-5432-a3f8-3c3152a646a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ai16zdao-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai16zdao-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51864b9-8506-5efc-8fed-3b1f859bbe03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiagentlayerclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagentlayerclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e29008b-a8c9-5033-a1d8-6a00099ae7e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiagentlayerclaimdashboard.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiagentlayerclaimdashboard.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede79556-b8b9-50fd-be09-05274f95a4a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiapagoeta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiapagoeta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6965a70a-dfed-59de-98d0-338e7813f00a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aib-cto.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aib-cto.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58be91e4-dae6-5d02-9ee6-2a44a9c00279","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibcs.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibcs.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c562a1cc-5dbf-5697-be2b-3b828cfbb165","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibinance-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibinance-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32957651-66f0-54a2-899c-794211a73c43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibmobi-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibmobi-auth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0dfd2e-7c44-505a-9dbf-bdf63e35f810","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibmobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a3ccbe-3434-57f8-8b4c-c66758fab1c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibmobileonline-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibmobileonline-secure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f145872c-b7ab-5877-9b3a-04977b4c4bb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aibonline-secure-payments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibonline-secure-payments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1842044-c10e-5367-bf4d-1570a0f3937c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aicbd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicbd.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9fb824-2449-5293-b0de-46fb7a425438","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aicryptotrader.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptotrader.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17f2344-a99d-5c24-8330-dd9d6de3d17a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aid-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f6b946e-1d39-5fd1-9ca8-d3437ad7aefe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aid-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--149f3d54-254f-52d0-ad4d-d8f391c3caeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aid-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6feedd4d-0e48-5800-9c96-09c7ae675298","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aid-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9539b6d9-1dc4-592e-9cd9-6d59b1fab694","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aid-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897f8af1-1b32-5dae-a22d-f7f198db5b97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aide-plainte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aide-plainte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c971861b-6793-5beb-b5d9-cfa760d6e354","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aidml.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidml.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58749500-29c3-5d23-9704-2c378e4a8864","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiflowtoken.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflowtoken.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0023a393-8954-53e2-b327-42ba537afab3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiforextrader.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiforextrader.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0fced1-1028-5c7f-a9bc-02d1907a3548","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aigentrun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigentrun.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a48894-9bf0-5461-b064-0f7e24134bd5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aihmrcorporation.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihmrcorporation.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6becb536-aecb-52da-9207-d809ad88b7d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiinvestmaximum-es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvestmaximum-es.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ae8229d-29e8-5ad7-a9fa-25fa7a21911e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiinvestmaximum.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvestmaximum.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3baf0077-ae5f-5fd3-b5f1-7ec12c614af8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiinvestments.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvestments.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4223a2a1-2fd4-5a79-8502-5bd124b14d9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4538b5-8505-5a62-9960-c82b1784b311","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--830386e5-603d-545a-afe9-ca04ec6cf101","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-eigenlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-eigenlayer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f740db-819e-5bcf-9f7b-2cd72285b4b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-hyperliquidx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-hyperliquidx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5a275e-d650-5340-8b9c-a279b275fe85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-lidofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-lidofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--687a3876-a42a-5d5c-ab5b-0653771b2aad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocation-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocation-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82922955-ad1a-5916-b5ef-c3ffb42b2149","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd34b1c-cc47-57d2-a5fd-fe4189b51d1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a811cb2-7120-5317-b643-5f902b65f95f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6122284-05c7-50e7-8314-9c8b3cc40381","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-eigenlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-eigenlayer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ca2814-4ef0-57da-93fc-108226390627","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-ethenalabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-ethenalabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3200c2-16cf-5143-b639-0fdb68ab12ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-lidofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-lidofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--604dcf20-3753-5dac-97db-e87a441b855a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a42ade1-46a9-53b9-be03-30ec609b5422","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-pendle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-pendle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0345e700-31bb-58d2-a5e6-9ecf35d50f67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--087392a1-94e4-54d6-bd7d-b6d0f3bea8d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-pendles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-pendles.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de09fa90-f675-5281-b6ad-8141a64e1b16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-stargate.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-stargate.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1579a9b7-66c1-5b14-8489-7bcd2cddb891","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiiocations-wormhole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiocations-wormhole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f16818-4941-5396-89af-eaea7f084049","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697b4364-fc21-5973-aae2-df4ecf961ee0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailenbase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailenbase.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--199bdc47-6464-5d85-b6f9-667707797b04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailenbase.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailenbase.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5668db-436d-5ab9-afb5-11795a9e4581","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailevesosyalcom.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailevesosyalcom.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71772e8f-3f09-51c4-8017-1b9fa85cb03a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd868dad-1547-513e-aa22-e2d4acbec258","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d9ae16-9008-503f-82c1-f770b2f8ffe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d23486-0555-5b1e-bb2c-eaaa4336d0e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-eigenlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-eigenlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53de1d2-80ba-5651-9a44-79f009319a74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-ethenalabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-ethenalabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf9c0e69-6088-5c83-8b2e-f428db914a99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c019c7e-b66e-5a92-9054-d9896cc4810d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocation-pepecoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocation-pepecoin.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c0e2fb-0f17-50d8-aae0-e3247931118c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df2fa1c-5027-5e68-9431-9ae708f66198","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0ee4a6-767b-5eae-b853-d02c6ee1ff95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-eigenlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-eigenlayer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ef6aa2-0a5a-5bfc-b745-b00b568665df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-ethenalabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-ethenalabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cfeb71-e7df-5fa3-b3eb-3b5d69def417","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5e4a74-4fb9-5be7-aa95-3bc9606afff2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-pendle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-pendle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f683118-1f91-564c-80fe-d5db5f68e659","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b72c1432-f1f3-50e9-8414-8e9a7430e38d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ailocations-wormhole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailocations-wormhole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--203a20e2-c631-5d43-9738-33147c6adc73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aim-market.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aim-market.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1721e25b-f803-524f-b9bd-410eb8002662","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aimemtools.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimemtools.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8346a969-ad60-5097-8147-7006cfd94842","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiminingpool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiminingpool.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fc57a8-c50b-5582-8110-735c69897a52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aimistral.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimistral.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98309f9a-1c43-549d-b025-630d2ebafc61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aimmarket.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmarket.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--460458f2-b781-547f-9f63-936b4affcca3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aineofinance.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineofinance.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fad4c9b-6c24-55bd-b46e-9ee80dc99e5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ainft-updates.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainft-updates.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c4a63f-e11e-5b77-ab53-a2b37d69d739","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aioznetworkreward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioznetworkreward.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc184a9-a3f7-581a-8593-95bbdbf5499b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aipornland.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipornland.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0912c155-7a1c-5062-828e-1035febba607","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiprofitengine-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprofitengine-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13c08d1-4cec-5564-a7cc-74a9fa322839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aiprofitengine.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprofitengine.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd93cb0-3583-5c51-8324-dc81b894aae7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: air-drops.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-drops.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a2cc0d-b728-5a81-a329-23145e08657b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airasiamalaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airasiamalaysia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30ddb8fd-1bc3-532b-9e91-19ce2dd292ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airbet88website.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbet88website.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15f8ec-57d8-5ec6-a4b1-a4826191da21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airbnbinvitation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbinvitation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18bf97a4-622b-58c4-ba2e-6efd3c9eda6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdop-hypeliquid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdop-hypeliquid.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c14d5bd9-4ed3-5ac2-aca0-74ff268a97c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-1co1n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-1co1n.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69001553-85d5-5a1e-8bb0-e354e01dc574","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-actsol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-actsol.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04407e48-3962-5e95-996b-9f5b8537da80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-agix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-agix.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7766a13-f7ad-56ae-85e0-a9149cdfa126","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-agix.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-agix.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1047adc-61c4-5e22-b8c8-3799336fbdd5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-alphaofsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-alphaofsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb625e52-6fc3-5a03-8fa9-9afec2fc7fc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-alphasol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-alphasol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f537e0e0-4f74-52d8-b2ad-68bceea2ffa2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-anime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-anime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f638b824-3712-574d-b95d-77ba24d32f88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-anon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-anon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ccda67-d9f0-552c-96c8-ee59a72c9e89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ansem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ansem.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971dec7c-fb60-5015-ada5-a271ee0378a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-apecoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-apecoin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9821af0f-6c50-5c90-b549-201a5055c5a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-apepe.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-apepe.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2b4cbc-3973-5130-8784-6cf2be8d6f80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-arbitrumtoken-gateway01a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arbitrumtoken-gateway01a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a877a933-96f7-50fd-96d9-3038f58636a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-arbitrumtokens-gateway01c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arbitrumtokens-gateway01c.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e098d1c2-b240-589e-ae16-de856011bf08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-arbtoken-gate1b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arbtoken-gate1b.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf792df-b57a-56d9-bf66-76cad91ac894","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-arc.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arc.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1db2ba3a-a1b7-5de3-aea7-5610005d1b88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-arcfun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arcfun.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--635d9a47-d0a6-582f-b805-3b3598a20e8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-asterdex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-asterdex.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2703b9-15ea-53ab-a7b2-e763e686730d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-asterdex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-asterdex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e7ca89-8fe6-5695-b152-8906db70ff0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-atleta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-atleta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f73a593-3074-5296-9d4e-a8017b889775","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-avici.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-avici.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a599b02c-6381-590f-8bd5-0a2f566aa0b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-axelar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-axelar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b942a6a5-8a15-5e49-9799-e1ed869bf089","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-babydoge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babydoge.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c96d93c-b0ac-5516-a803-996e7ec4ea11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-babydoge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babydoge.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d140df48-ec99-5189-a1d6-e1e11e4d78f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-babydogepaws.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babydogepaws.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17aee34-3d50-52ef-a654-685d46051123","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-backpack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-backpack.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b731c80-39b1-539c-9450-5e548bf9bcce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78d767e-d17f-5d7e-8d05-309cd785d044","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-biofoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-biofoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638a7062-bb69-5921-a2c3-d98061143362","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-bitcoinhyper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bitcoinhyper.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d84504-6ffa-5319-bf7c-fb90dac84873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-blast.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blast.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c84f3a8-c78f-5466-acf6-bcd23d3eb3e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-blastroyale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blastroyale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cffa7142-357a-54e0-95fb-4959a12d0052","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-blaze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blaze.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d136a158-ab6f-5102-86e8-c8e8a466aeba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-blaze.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blaze.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f8cbce-6297-5c6d-808b-c6d1caeeb996","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-blaze.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blaze.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1cffec-62db-565e-83ef-98513dc2f57d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-boredtopia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boredtopia.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd41a7d7-7295-5184-aa1c-82b1430b9ba9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-boundless.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7485f86-ada3-5569-afb3-25c2ce67ee7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-boundless.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028af75b-e266-5052-9eb7-46f34bbf5fbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-boundlles.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundlles.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13eb4c3a-7fbf-5a62-8b7b-b0aec61a62d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-britcardmeme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-britcardmeme.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722093de-849b-5247-903f-5fd50b0c0d2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-bullbitai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bullbitai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ee8416-7037-5e43-bdc0-d6b4e0236e24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-bullish.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bullish.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f50845c-dd5b-53b1-962f-ad227eab172a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-butthole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-butthole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae20ac2b-71e7-5346-a454-7df084d5c502","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-cashcat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cashcat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09adcac6-279c-56b0-86f1-f7257ecc3720","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-catwifmask.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-catwifmask.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52559f6c-7c06-5d66-a8ce-08dd60b9a914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chainlink.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chainlink.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ecd3a85-776b-5610-9b85-d7063ddae22d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chainopera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chainopera.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6f0bb55-cc22-5c12-8301-951c8b315fc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chainopera.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chainopera.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33386020-7e7e-50de-bcc9-0afbc25a316d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chainoperaai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chainoperaai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44d3c63a-abe2-51e7-ae2a-0f5b863c8552","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chaos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chaos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a19a8ff-d3bc-5712-8f3e-fa46aad78bc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-check.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-check.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec139003-df68-5f29-ac4e-c8f3e1fc9272","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-checker-grass.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-checker-grass.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a20c4a-221d-5982-bfd0-4c7b81936332","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-chillhouse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chillhouse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb02f9-e9fb-5bb6-b371-5f21d54f4680","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-clanker.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-clanker.world']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62661fc-987d-5f1b-860c-a2250ccec783","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-cronos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cronos.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d675ba94-027d-504c-8e54-a9eda9de20a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-crypto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-crypto.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5eec2a-9521-5b05-bd9d-7aa39ba3506c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-cryptoallstar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cryptoallstar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8f99796-a849-5f98-a110-bee1302d3dc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-cultofroy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cultofroy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870b7326-6b35-53a0-9f6d-361c9e47cab2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-daddytate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-daddytate.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6dbfc6-a108-55b9-ac7f-eb566dc5f6c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-datagram.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-datagram.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f31f28-5d9e-5d7b-a777-63417082c9e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-deadguy.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-deadguy.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf1800a-550d-5d34-9ee1-49bf06712523","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-deadguy.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-deadguy.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5f2ab3-cfd6-5f66-b1f3-05535e894f07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-debridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-debridge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1f0c563-bca7-5d42-9247-2d81816713c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-delaunch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-delaunch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5494892d-e002-536c-b849-61b793a585aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-digimined.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-digimined.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452c23c5-fd28-56f6-b020-c600c7d2b41e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-din.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-din.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac332dcc-0779-5702-b88e-cf7c27a9c6e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-doge1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-doge1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c596ba0-a8bb-5bf7-ac27-e4f2037a363c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-dogwifcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-dogwifcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b894091-271b-5ade-a4df-bf8cfaba5ac6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-drapertv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-drapertv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4aac75b-c8ec-5170-afc6-84b542619638","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-dydx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-dydx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5926abf-105a-5895-9914-63b1c37385a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-eapes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-eapes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8fbb980-bdad-5333-85cb-c87aa2b85fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-eigencloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-eigencloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b7d31e-0755-5d7b-9a61-d3f11b42d58a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-embercurve.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-embercurve.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508c8857-fdb2-5766-b832-3d6210cf50ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-embercurve.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-embercurve.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6528cbbc-296f-5db6-a8ab-22ed886fd22d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-endless.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-endless.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d1aa912-c638-52f5-8a2f-5943116fba17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ens.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4d0033-9469-5ec2-bbeb-4bc29c9186d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-enteruranus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-enteruranus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--836bb5b6-ba24-51d6-acfe-ae4efe743322","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-falcon.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-falcon.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--226407b9-e403-5de3-bb5c-62e6272479af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-fartcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fartcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f142a5a0-00e7-52a3-8f6b-17c4614812f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-financecoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-financecoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2436e3fb-1b12-58e2-9260-338889eff65b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-firelight.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-firelight.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e71e99-572f-534a-baed-add495b161cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-firelightfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-firelightfi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e55195-a47f-54d1-9805-27383d8ed488","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-flaregovernance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-flaregovernance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d9797f-5ecc-5ded-8457-ce6f95ea49ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-floki.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-floki.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21475a5-542f-55de-b52f-8800f6e7a247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-floki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-floki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cd4290a-f541-5989-ab2c-58743724d92c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-floki.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-floki.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c88bff7-5229-52da-b842-f96ed56e83ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-flork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-flork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0619ac5c-8f6e-5074-a174-a14e1c61b337","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-flt.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-flt.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52780ff3-a91f-5f18-b0d8-a801d50d271a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-fogo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fogo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a72566-fc3b-5a35-89f0-125e0d0e420f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-football.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-football.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b494c6f1-ff3f-5a9d-af77-2d7a88ff6f49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-frax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-frax.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e3038c-9107-5507-831c-78e27082969a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-fricofficial.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fricofficial.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e170c1b4-5033-5025-8672-6eb73e54295e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-fricthefrog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fricthefrog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5b60a6-87f3-55b7-86c8-72bdca0d453f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-fwog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-fwog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05bcef1-57ef-5635-b677-67447463b65f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-gala.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gala.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d760c8a-adca-549c-ac05-7a159629c12a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-galagames.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-galagames.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce77c49f-8f8b-5de9-80ce-346984a196f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-galagames.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-galagames.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e6bd8e-d642-5bc3-9278-d4f1f1dd4e3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-gigachad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gigachad.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc886b0-2e9d-55fe-baca-3cd5c16d1b2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-goatcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-goatcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b289532-8b16-569a-bc73-618a81c31957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-grass.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-grass.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--924e74a0-42b0-518e-8dc6-40c3244c5aaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-gunbygunz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gunbygunz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21a1cce-529c-5519-b386-45fe281d938d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-gyat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gyat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1053bec1-1f8e-56e3-b5d9-4bc78d6b5209","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-gyatcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-gyatcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7599e8-3705-5dae-8e5d-053ecf9b34bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-haedal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-haedal.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b34e73-d414-529e-b279-9a1329cbc93c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hamsterskombat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hamsterskombat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c36410a-bcdc-5cb8-a191-211b2e3f5edc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hedera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hedera.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ede70c1-0de3-5620-9981-cd54af204c21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-holo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-holo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd4fae25-52d5-5dd6-9584-59a2f89d3f77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-humafinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-humafinance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df0c215-6e10-5b4e-a27b-4692c53ecbc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-humidifi.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-humidifi.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31df4780-41ab-527f-b201-564476e8ebfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hunterz.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hunterz.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--008a7147-35c2-5563-b5f6-7170509576fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hype.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hype.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61bdf10-80f0-520d-867a-60e077b26651","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hypefoundation.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hypefoundation.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c575be-dbb9-5fbf-a2af-d8df846405da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperbitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperbitcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86037f41-a7bd-542e-b219-5230ee579127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquid.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8b3c9a-2dcc-5b3f-a286-58251bccc3b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquid.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709fe9ca-99b5-560d-8ea5-c391a3a9a593","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86d8d5a-2b0b-53e5-a991-e508eb6917a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquid.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f6fc64-e84c-58eb-8523-5fd8b0312851","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquid.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquid.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f0af5a-af74-5207-8c50-b42e62ec5bc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-hyperliquids.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-hyperliquids.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e21ed4cf-5f5f-5086-a0af-58b270b7bb1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ility.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ility.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--644283d9-1d78-5797-a9be-968ad97ed1c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-illuvium.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-illuvium.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6768e3-6c75-505f-bc40-8a1dbc93a528","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-initia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-initia.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5f7787e-9b3f-522e-a9d2-6b169e50210d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-itsafwog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-itsafwog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f53472-6181-56d9-b852-dd7423b15470","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-itsthelion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-itsthelion.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b773872d-8293-5c18-ad09-2c0986c794fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-jailstool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-jailstool.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6ae18f-a9ca-5d0d-80eb-8fc99ae73c3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-jito.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-jito.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa6cd69-d168-5188-9dfd-73006a96bc7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-jup.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-jup.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b286a1ae-c61e-5f33-8046-5d67dac5012e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-kabuto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-kabuto.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d4576f-b65b-5162-a535-9bbd1d62ed94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-kaito.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-kaito.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959d21b4-56af-5328-bf4c-e93128fd857d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-kazonomics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-kazonomics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000901f-dc0d-5f09-9b9a-810fc94b412c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-kerneldao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-kerneldao.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b16f5f2-3714-5f43-bb5f-e7fd463b218b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-kerneldao.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-kerneldao.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fb051db-5699-5cec-b656-92d55db320b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-layeredge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-layeredge.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f03f864-682d-5e1e-ac88-4510781477c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-lido.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-lido.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d4c7eb-b9b8-599f-8e05-c43078e6defa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-lidofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-lidofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db3f361-96ad-5349-bb9d-5e1595491c74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-lidotoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-lidotoken.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9f1467-ecce-52d5-b773-27d2450f1362","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-linea.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-linea.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8af989-9852-587a-b700-cfb1b21d5666","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-liquideth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-liquideth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d66fa6-0959-57c8-a14d-b8523d47b004","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-liquidether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-liquidether.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--323ea24f-672b-5e6c-9f7b-b8b73a87b664","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-liquidether.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-liquidether.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f047a0c-a563-5487-b9cf-d7ee8d3f42d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-livepeer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-livepeer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c364a0b1-e802-5868-906f-c5758beb53ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-livepeer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-livepeer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e129ea69-5e44-5d5f-b35f-73c0e65b0c22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-loncher.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-loncher.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19bd2de0-40a8-5d8b-a298-ab978326045b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ltv.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ltv.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f15c61d-e659-530d-b2c4-63a4bf48d94b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-maker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-maker.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7028d7-cfcb-5345-87ea-145b3892b0f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mana.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mana.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--828c075e-097c-5729-9819-76e54fd347ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-manlets.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-manlets.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67d2293-18fb-56c4-953e-c2cb9838ae39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-masterbot.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-masterbot.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84181499-9d1a-5620-87f7-141dcf64516a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-maxtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-maxtoken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2565d030-febd-58e4-a0ea-3332464deebf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-memeroom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-memeroom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d36b4ad-c528-5414-8fb7-10ac20f4434c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-metaverse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-metaverse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364c9e74-cf60-54ca-9916-45d185e24ece","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-meteora.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-meteora.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93bb8da-fdf5-5067-bedf-71087dbc177b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-meteora.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-meteora.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d527eebc-c43d-5924-a0e2-330e1a77cdf9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-methprotocol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-methprotocol.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c9c3c6-e738-5bd7-b7bf-3e4bd3e0ad66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-midle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-midle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dbf5990-7a93-59de-b0e6-9f09c3de1a57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mira.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mira.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39233ce-f311-5dee-9181-77d7de9d2fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mlg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mlg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f146721-f869-57ba-932a-90a89195e13e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mlg.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mlg.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0039b772-abf4-5088-9125-ac738755a26d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mmtfinance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mmtfinance.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f104d8-321e-5f47-bd06-f6e5ac083d54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-mobyagent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-mobyagent.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b49b32b-6911-5ff5-930f-e58be2c61c3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-moodengsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-moodengsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--071d10a6-26c2-5843-84e1-d359c36bb314","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-moonbirds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-moonbirds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060b6d8f-6b2f-5170-b023-7add905e3de7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-morpho.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-morpho.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26f851d3-d4bf-54aa-ba61-c60cbe6eee5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-myrothedog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-myrothedog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54cf1ab3-7a41-5691-a132-9c3af2678fb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-near.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-near.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fd4e4e-9286-51a1-9e78-1dc60a01620f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-nearmobile.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-nearmobile.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--534457e2-87fb-5eca-ad0c-ec4adeecfb15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-neiroeth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-neiroeth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7915a66-4aa2-5453-a055-22df0fa633a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-neur.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-neur.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba5b5314-eb44-5c9f-abc4-cbc2d9179a7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-niggaliquid.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-niggaliquid.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--107da559-8b59-55f2-95c5-e53703324a14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-nubcat.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-nubcat.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ade13d23-c593-5181-80d8-9175c5111085","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-nyx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-nyx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f5d5825-d92f-5b52-8371-c74d6fb9f996","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-oether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-oether.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98767765-e096-521b-9dad-e0c917d37856","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-optimismtokens-gateway01a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-optimismtokens-gateway01a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9ae188-9bb9-5271-93a9-bf83cc05cb5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-orbiter.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-orbiter.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a45a02-43d0-59f3-9c2e-6f47ebc60385","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-orbiterfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-orbiterfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f622fb-baeb-5f2b-b39e-844f688fa6e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-orbitfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-orbitfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaba1a00-def0-5766-b21b-ef4e0a486bf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ore.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ore.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b7af62-69e3-5292-9d2b-338ee4bb4a1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-origindefi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-origindefi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47235e0f-672f-57db-a7e5-ac75698c56d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-origineth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-origineth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e04b5f7-f3b5-5a1a-9b08-078f52fa80eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-origineth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-origineth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f2f2fa-a317-594a-81e0-daec45fd77fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-otomato.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-otomato.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7846b2-b6b7-5f36-a23e-cd4118129520","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-ousd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ousd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74c4ce43-d6bf-5408-b154-4ca9f3ce2085","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-paintoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-paintoken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d85765-1dc7-5b7f-8068-eb53817ec914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-paradex.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-paradex.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc5d106-40e0-527a-8c3d-d64118cfc6d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-payai.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-payai.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a9b5cf-b7bb-53d2-a30d-3c53f5bae697","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b8c93b-7eb4-527a-8d51-9ed5cc799ebb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pendle.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pendle.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c62d78-64fc-5f15-9cd3-388980f0746a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pendle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pendle.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb84210-a86b-55f1-a296-4d5eb6dded43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pepe.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pepe.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e395268-f5b5-5b0c-a485-4f022c816300","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pepe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92e9d05-9b28-59f5-8081-28e9630979e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-perceptron.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-perceptron.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cdd383-68d3-5350-83b9-211e82df11c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-perceptrons.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-perceptrons.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a6a8a51-3d32-520a-b29f-e9983b5adf6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-perle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-perle.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ad73bd-2aa8-5239-bca5-9cd11e86e6ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pfpepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pfpepe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c81b39bd-5ad9-5fd2-b8d5-c936e0b81926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-phantom.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-phantom.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b7384a-49a0-5331-8c12-c75ab4459acc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-plasma.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-plasma.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ac2c7e-1af8-5d36-b969-2064a61a6c32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pnutsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pnutsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca0ad6c-7150-5fb3-88dc-e9c0ab84c4a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pollyonsol.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pollyonsol.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ede31da-aa6e-55ad-953a-63332731322c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab4fe06-8cce-51fc-a12a-001627ca3b70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pooledeth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pooledeth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3ba27e-87a8-5484-beb1-446f3965b0b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pooledeth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pooledeth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7a660a-0745-5ce9-bbbf-49e905335bb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pooledeth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pooledeth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b385b17-e414-57b1-afe5-34fff83da40a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pooleth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pooleth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2663d99e-3c61-5473-9f43-bc6f1ece3178","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-poolstake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-poolstake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05610e8-83c3-5c18-9ce6-a197cbdb6e18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-poolstake.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-poolstake.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95561863-6d2e-5267-8ff4-58fac53b4d6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-poolstake.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-poolstake.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3ec108-b79c-5e21-85ea-5e1b133095d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-poolstaked.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-poolstaked.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8e5471-17de-50bf-888c-ee73db2394e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-popcat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-popcat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69289203-73af-59e4-927d-161cb9d1369b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pudgypengu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pudgypengu.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d89ea03-9761-5485-8ed5-5f9d1776d09c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pudgypenguins.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pudgypenguins.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e67e87-f59a-5619-b48e-acbcd7db5310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-puffer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-puffer.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38714d89-7b23-5b78-99a2-999b7ef4a838","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pump.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pump.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1b1debd-4812-5aa8-8be8-4140100b7132","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pumpfun.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pumpfun.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5042cc22-d60f-5884-938e-39d99422093c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-punch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-punch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02dc6a5-6fdd-5544-8acb-35dc4b9c11eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-purpe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-purpe.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3680ac-62e1-53fb-8d9a-2240ec384e4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-pythia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-pythia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9446fde-e998-57fd-9980-dbf983965d2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-quickswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-quickswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fd11807-2631-5461-9d7f-1b88bdb3aa63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-quickswap.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-quickswap.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5df782c3-4ae6-55e0-bf46-6d0f8d1da26d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-quickswap.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-quickswap.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91dcd8f5-0dfc-5c10-80ac-cf972ef7262f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-rainbow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ce16b3-25ce-5d37-b05c-859b5ba99506","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-rangersprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-rangersprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44df4968-9a8b-506f-9e0d-6944c7343d31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-rcadia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-rcadia.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a31f457-736d-5773-aced-2362b806a4e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-regret.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-regret.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc134824-d9c4-50e4-9290-6ef757c237fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-render.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-render.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc28d2a-e72a-5cfa-b822-c927fb1e4aeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-render.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-render.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b8662d-35b6-5801-ae5d-eaa336fe04dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-retire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-retire.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bdd7866-6de6-5afd-b71c-6e809b64a112","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2f6645-9f05-55b5-9761-f2e0b5119b09","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-rus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-rus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ca9263-8298-56e1-99fd-06a1a5cfb188","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sand.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626bbf9e-eb5c-5ee0-a805-ecb4665d3fec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sand.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sand.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a885bf7-0097-5a99-a7ce-5a07cb4f4dce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sand.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sand.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c51b0d1-645b-53ab-aa85-bd31dd8f3120","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sandtoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sandtoken.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e989ec63-422d-5b2a-863e-b8f50273ef18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sentient.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sentient.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--482d2710-be74-5efe-86b8-25105d394df0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-simonscat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-simonscat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6479f7d1-0942-5146-bba1-ce4d4cd28ebc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-skyai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-skyai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5bda67-7bef-5052-9cbd-32978e32a7cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-slothana.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-slothana.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6847d25-90ca-510c-9a3e-296dacf3d741","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-soinclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soinclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7af766a-df3b-5f27-900b-cce9bef54bdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b9be6a-ae18-56b1-a7a2-dfd269836152","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solanatoken-gateway01a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solanatoken-gateway01a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3246de4-436f-58f7-93ce-6b5cb74da62c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solanatoken-gateway01c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solanatoken-gateway01c.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386d83c4-acda-5aa5-aa0d-a3edfbadecbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solanatokens-gateway01a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solanatokens-gateway01a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71863a3e-80a8-5304-9b37-9dfb83c91a7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solaxy.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solaxy.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea055b53-4981-5e65-863d-b0bd1ea8fa11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solaxy.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solaxy.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1be4824-8a2f-5013-b63f-49ea1360e978","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solaxy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solaxy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c711b4c-2cd7-5fda-b027-4f9205584deb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solaxy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solaxy.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3167c02-8f50-518e-a9ff-88b8764dc213","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solaxy.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solaxy.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ef9841-fbd4-59a7-ac5f-b2aee6789a2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solayerfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solayerfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2072854-1e6f-5fa7-a9f8-d51109f9dab6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-solv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-solv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa1a4da5-9968-51fd-97d1-03006458fa73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-somnia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-somnia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70918fca-ea20-5d63-a0f5-ddbe176b227b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sonic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sonic.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c522d300-e233-5573-8131-6f1243e8413f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-soniclabs.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soniclabs.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae138d05-2aed-52ac-a70c-da118e45741d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-soniclabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soniclabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c4f3ff-37aa-5722-89a6-d5a41b5a55f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-soniclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-soniclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873fcee4-5183-590a-a43c-655386234612","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-spark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-spark.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16468cbc-cbb1-5f28-969c-a739cd165b25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-spx6900.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-spx6900.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70322d78-f2c1-5fd7-a72c-aed3be45059a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-stakestone.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-stakestone.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b765f9-8a3d-5600-b995-acedfebb79e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-stakestoneclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-stakestoneclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e14fd125-960d-51ec-9718-7e0e9f8fbf2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-steer.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-steer.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d94c8c42-f055-554a-9ccf-acdf192c775d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-stether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-stether.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff7c021-1369-531e-b059-2ff37f9440c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-stonkfun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-stonkfun.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fea7ea-8a35-59d1-a3de-f258d45346d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-stork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-stork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f0ebbe-cef8-5b5c-954c-b4e5d336c52c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-streamercoin.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-streamercoin.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e1c3fb-1004-5e9c-91e0-085556325548","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-sui.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-sui.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d53154-ad7f-54fc-b640-653ed72cc150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-swarms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-swarms.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc9f5ff-2948-5338-acfd-be9232024c4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-tapestry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tapestry.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4463ec-2d66-5eb3-9ac1-7e42fbfc3a24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-tari.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tari.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2771886-9670-504a-b8ab-e46274d91bf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-tari.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tari.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b92074a-af8c-521a-aaed-6a0fdce77cc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-tetsuo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tetsuo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc44d3c-87bf-5d4d-a975-f01225f17fbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-theturtlefranklin.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-theturtlefranklin.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a37814-d513-5304-89bc-f21837cb7e0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-transaction.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-transaction.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c80054d-c3ee-5c52-b5c6-7d655b3f52a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trisigma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trisigma.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986ba799-5b13-5eb2-b587-39db1524eee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trololol.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trololol.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5d47aa-25dc-5051-b027-7c2e4e825e04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-tron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-tron.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d5e21a-e202-5661-b39e-a9fa781ef053","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-truezeuscoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-truezeuscoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dfa5563-d7c3-5def-a514-7466d8775684","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trump.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trump.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab91093f-6774-504e-92e5-20e61fe9209b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trump.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trump.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c91d10-c390-5f1f-870b-f00ca98cb968","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trustwallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trustwallet.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26f55f4-25d0-535c-b7f8-fb8b11004687","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trustwallet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trustwallet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e59f4c84-ad69-5914-8a3d-4c52cd50bc75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trustwallet.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trustwallet.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af49cd5-46d0-5ddd-b512-e03e3ee162dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-trustwallet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-trustwallet.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dac8b70d-dbc1-5ad2-9ed4-74300500129b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-turtle.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-turtle.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22427f16-36bc-51d6-a6ed-4f76e2be8201","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-unicornfartdust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-unicornfartdust.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd72a4ad-eff5-584c-87b2-fba4f5f34f38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-unilabs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-unilabs.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72c4c15-2979-5d5e-9fb4-5c981e434a7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-uniswap-gateway01a.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-uniswap-gateway01a.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4238d73-a03d-5831-918e-814a2cc9af27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-uniswaps-gateway01a.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-uniswaps-gateway01a.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--832ec468-0870-5080-b9ea-1559ab670cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-uniswaps-gateway01c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-uniswaps-gateway01c.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad59934f-1dde-53a6-8961-674e62a69f6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-uniswaptokens-gateway01a.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-uniswaptokens-gateway01a.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6376535-888b-5555-99d0-865b6a52866c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-univ4labs.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-univ4labs.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d3c2a-acd1-5993-a84a-01d06a8311b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usdt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usdt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee90f317-a0d8-5655-a281-8f15ffb7d37f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usdt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usdt.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d029b8e8-88a4-5dc2-b356-a6b18d54efb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usduc.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usduc.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e42e2f-c6ee-5f0a-b0ba-448b0eb738af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usdut.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usdut.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d2a3c4-ed19-575a-858b-26e701244d42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usetapestry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usetapestry.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75499ca3-20f2-5941-9442-477ca52d980e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usor.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usor.tech']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42819d02-f94a-5514-a810-38b7ed23b142","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-usualsmoney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-usualsmoney.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b343fc9-03b0-5111-bdba-a0637c3ff870","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-virtuals.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-virtuals.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c46b36aa-0a5b-5f79-9a8d-2390c4199f5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-walletconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-walletconnect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e445bc22-424f-5b58-9f1d-c65fd86c5095","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wardenprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wardenprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1fabd4-2443-59ca-ac67-87c367bab464","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wardenprotocol.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wardenprotocol.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f71d976-2f91-5a5f-9a92-61e89e72fe6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wardenprotocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wardenprotocol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd1aa5b-4bc4-50f2-b902-0e457d3cf888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wardenprotocol.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wardenprotocol.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0369afce-675d-5460-8e2a-5fd3e4c04fce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wardenprotocol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wardenprotocol.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e68ab3-8d7e-5d06-8b70-0f1237c848bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-warpcast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-warpcast.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2e8f38-ba62-5778-b8d6-5eff49f84477","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wlfi.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7dba351-a271-5b21-b6e5-a225e28e915a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wlfi.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d2fcdc-e694-560b-b4bc-e7bb8a001620","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wlfi.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706b691a-ffc3-5b1b-934c-8610aa4b12ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wlfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wlfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fce9da2-a11f-5bf1-a1dd-3120be2f50b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wooeligility.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wooeligility.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360a3fa8-145f-5f3a-9341-a848341f36ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-wynn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-wynn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ec12047-3024-5ea6-b31f-20133fb7a555","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-xnetfoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-xnetfoundation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b7d257-7de4-5cd6-a37e-07553dfccef1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-xrpl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-xrpl.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c1eb40-e932-5edf-96ad-9e05c47b3f35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-xrptundra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-xrptundra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87aa0aaf-a310-5bd5-815f-6f33bf5d0d6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-xyzverse.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-xyzverse.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe685ae-772a-5c3c-8795-1c5b1851fbd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-xyzverse.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-xyzverse.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507f763f-5595-5ca5-843d-b2d369167cdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zama.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zama.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d7eacc-98fd-5d14-aa25-1583ed68291e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zama.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zama.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fa4b90-c934-5c06-84f2-3bfd127f1fc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zerebro.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zerebro.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879451da-c5fb-5c0a-81f5-61939c0dfda8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zero-coin.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zero-coin.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e8827b-ddb5-579a-8929-0847a1aded3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zirodelta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zirodelta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91db5db4-b704-5fac-8c57-09e2bd1e5ede","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop-zkpass.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-zkpass.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4cb1cef-52ff-5649-9ae6-eba23efeb291","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop2025.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop2025.monster']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484ce373-0521-5134-850a-7f72602f22f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrop6-optimism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop6-optimism.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81db3cf3-6d1b-5b3e-a1dd-ba469f4963ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropberachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropberachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c3f0b0-acb1-5c44-8a06-760bd833e38c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropbot.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropbot.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8b06c1-02f8-5deb-8e14-2c52f6b58c8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropdoodles.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropdoodles.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69964dd0-b19b-5a16-86b6-97dcfb7c7acc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropfart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropfart.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355628cd-5a70-5a2d-8483-d33ecb8bb8ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropfree.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropfree.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1378e9-d722-5fb7-a9c3-4b3e0f80b7a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropkys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropkys.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8dc316-5837-516b-bfb3-b245315c2e87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdroplighter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroplighter.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccaf1955-bc6a-558b-9d4b-d470e632a909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropmasternetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropmasternetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f906f845-68b3-51f5-a026-e95f1ed87a62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdroponlineteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroponlineteam.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b6d196-2ef3-5447-a373-f8425dd90d86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdroppepenode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroppepenode.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d605df83-7970-5492-9988-519044bdb190","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropper.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropper.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3997f7f-056d-582a-8c6d-fc30dbd365b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdroppudgypenguins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroppudgypenguins.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a03c9-a234-550b-9649-59fa1d03a6bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropripple.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropripple.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09cf377-5b83-532f-b3a5-9338cfb5a086","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-altcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-altcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b84a22ea-7f35-559a-9320-e9ccb46ab13f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-bitlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-bitlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6883077-f8ab-50e5-a1fe-2f65fd705f50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-carv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-carv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0b5790-3ef7-5c07-936f-c1746d257429","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-goat.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-goat.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ac24e9a-2c19-5a1f-b561-051a4776503b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-humafinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-humafinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e00fbb-010a-5fa3-8f68-6b9bdda6caca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-humafinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-humafinance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acfa9fb2-612e-51b8-afac-1050021cf30e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-hyperfoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-hyperfoundation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c738269c-7916-504d-804c-4bd8f27d3287","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-lighter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-lighter.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--496f70ba-7550-51ff-8ab7-bafb97df93d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-plasma.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-plasma.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab43374-1849-5e25-9ecf-01e22cd2839b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-pudgypenguins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-pudgypenguins.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d064dc-49e5-5ef4-ab67-846e181ede21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-pythnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-pythnetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b21634e6-0a02-5d6a-824f-b6e8946f7d39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-soinclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-soinclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42b253a-60da-5f3c-ae3b-b7bf90118403","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-sophon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-sophon.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b10b82f-3359-584b-b8c1-70661be0659b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-stonkfun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-stonkfun.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c1c711-3b81-5189-a94e-3916e7cad769","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-twt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-twt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60def080-8cc9-53d9-a2bd-b9a0ee45408d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdrops-virtuals.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrops-virtuals.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11229bc-7d00-544f-9d50-89e37c9ba18e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsbot.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsbot.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3848235-7f8a-5f8c-a40f-ba7595d6285c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropscans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropscans.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad8dfd5-f21c-55f0-aa0c-6645e7a1319b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsdistribution.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsdistribution.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bd722b-c995-5891-be66-0eecfd076af1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsdogs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsdogs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f28222-45b0-5b0e-9f96-4ffccfeb8834","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsentient.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsentient.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--888debee-51dd-542b-a6c3-cb8b578946d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsentient.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsentient.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9da950-2e77-515c-a7e4-f72b6c06ebc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsolan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsolan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351937a6-0e7f-5ff2-bec9-3c1ca1d826d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropsolaxy.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropsolaxy.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ca508d-c88a-5cbf-aa1c-08b04b08148b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropten.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropten.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc15fbf0-c4c6-5839-9125-4fceba4e58b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdroptrojan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroptrojan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60aa657f-696d-5449-aec4-cd1e61916c8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropunderway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropunderway.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9d4d2b4-294c-50a8-ba14-3b889540ec36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropunity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropunity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--138d7a4b-56c2-50c6-9cd3-2233353cf923","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropusdt.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropusdt.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91039052-bd98-5527-9c28-27a322bb7ef4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropusdt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropusdt.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--136f5d96-d7b4-5630-a3bf-64ff28d9d030","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropwarcoinsol.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropwarcoinsol.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--964bd0ab-1a7c-5bd5-95e6-bd7ea845e530","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropwlfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropwlfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a17cdb7-864d-58cf-9978-c9373ada1ce2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airdropzkpass.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdropzkpass.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807b6edf-b537-5178-8efc-b640ca5d7af9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airforce-base-32.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airforce-base-32.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e749ea73-97c8-58c5-be43-cae2afbebaf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airlux-flights.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airlux-flights.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3657eb5e-15f5-5d22-85c5-7201ca5d7c3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airportauthority.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airportauthority.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254dbddf-5786-56bf-9660-932564b6dc4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airs-drop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airs-drop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e3e861d-ee42-59b6-9aef-439f4b68fc2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airs-solan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airs-solan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87021814-f450-5eec-90c0-ed91dc0fc294","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airs-solana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airs-solana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20f7361-df1a-5ea8-a4dd-660c04e9c791","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airsdrops.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsdrops.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d39a29-ffb2-59b2-ba4f-5371476689a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airsdropsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsdropsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88613d16-92c8-5336-9b62-d086bee1e1f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airsingaporecard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsingaporecard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abed4e6c-e03a-5814-b666-5d2f8549d6a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airsol.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsol.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b43b90-3b6b-5dcc-9f4c-58536de00d13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airsolan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airsolan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807144ea-6a14-5e3d-9a27-69027f69fbb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airspaceblockchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspaceblockchain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1448bb76-f7ac-59f8-8336-1fa8a156fc16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airspin-sql.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airspin-sql.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04aead07-195f-5aa8-ab6d-e61a92901e8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airswap.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswap.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712dfad5-7594-5757-b994-b127bdbe5d1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airswap.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswap.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1acec260-57c2-51a9-8841-9a6cfc314c4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airswipe.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airswipe.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89ab6bf1-c385-5bec-b140-b05ac6a6df7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airtrump.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airtrump.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ee6715-d13c-5b32-aab1-8de7965a135c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwalexapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwalexapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad49f777-a556-5209-af7a-bb5879225948","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexfraudreport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexfraudreport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ec1330-d793-58c2-b1b1-8621129ddbe5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexpaymentchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexpaymentchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6782d85-e2c0-51d8-aa55-53517ead3cca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexpaymentshelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexpaymentshelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f3cffe-2c93-530a-9ef1-49f97d06cb2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexsafetychat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexsafetychat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725ccac9-9fc0-5760-b51c-7100bfc59b53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexsafetyhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexsafetyhelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc200a7b-2f67-5b93-828e-cb0af9ec1171","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: airwallexwebsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airwallexwebsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e01b4c-10fa-5d0c-af61-b716657a6205","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aisino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisino.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b7ceda-cf89-55e9-bfdf-20e5b98059d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aisl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aisl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d627e1fd-b68b-54b9-84c1-c3982d580450","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitechapp.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitechapp.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aca66f7-f7d1-5fd6-bc78-a539001d4d30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitimart.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitimart.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890a5d88-7b98-56f7-b1ac-fdc29dcddc33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitooladvancs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitooladvancs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f215c2a-8119-5fa9-9c6e-adbdde769cd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitooladvanhs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitooladvanhs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--875c6ba5-50b9-52ce-b7b8-d921f05822e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitooladvantagehl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitooladvantagehl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f2fdd1-5e9e-5873-b200-64cff0681ceb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitooladvantsl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitooladvantsl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1428a5b-e4cc-566f-99a0-3018697285b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitprotocolclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitprotocolclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4687c4-81bd-5592-9c68-640f170cba1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aitradingbots-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aitradingbots-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dafe39-6b1f-54b8-996e-4a987054d46c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aivenicerask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivenicerask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--081f15d6-bace-51f3-a00d-888edb303810","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aivoiceagents-claim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aivoiceagents-claim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0273128c-df6f-524f-b351-bcac9bf95ab0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aixcb.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixcb.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa9ba837-e68a-5e74-abbc-0e02edfe3ff2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aixcbclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aixcbclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54b0f0c-8131-5352-8541-22220131261a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ajaxbet328.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajaxbet328.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--282692ee-c2b2-5a3f-8af1-e95b9d679c9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ajleiloes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajleiloes.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d23c76-1720-5ba7-b031-2b6e23f193c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akarora-law.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akarora-law.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d890e54-d310-5a8c-9f5e-7c11c968bf01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akaroralaw-limited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akaroralaw-limited.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16e9476-8b05-52a3-ae95-ab9166b8b845","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akasdao-airdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akasdao-airdrop.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af202643-c695-5448-bd44-53b2df3fc557","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akciovin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akciovin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80bc3b57-7f84-5490-a276-1105dbcdccf0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akdatainc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akdatainc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725982ba-f880-5e05-bd1f-68878dbf8484","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akhr.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akhr.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a880d08-0dd3-5ce6-9609-894b69b64149","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akitalabs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akitalabs.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717a5799-d68b-5dc3-9057-825a79503025","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: akitaredeem.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'akitaredeem.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c3d9464-41c2-5a98-9589-b50d53b6f204","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktif-jojobet-adres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktif-jojobet-adres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202b8a6f-4417-5a04-bb54-7203edd4999c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktifgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktifgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c8d44d-dedd-540c-b7c5-792740a66ac5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktiv-personal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktiv-personal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82aed9ed-037e-5191-b1a1-67557d09b9f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivfeld.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivfeld.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b259a3c-8af0-5024-a2d7-b4226b6b98ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierung-dienst26.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierung-dienst26.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--797d3a1a-bb2b-59f5-9673-f5a30a7a2fc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsbereich.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsbereich.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80162946-0d9a-5e7e-9325-1eb1e87e79fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsdaten.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsdaten.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f2f054-8d42-5f10-b97a-9128d73a7310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsoption.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsoption.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0f09a18-2db1-518f-95ff-d9b09cae53d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsplattform.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsplattform.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12916f1d-e926-5f53-ae5a-103efc2e84d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsstart.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsstart.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a1d3020-ad06-5dba-8e9e-7a22c01d08bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivierungsstatus.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivierungsstatus.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33e18213-471c-5430-805d-d871260af2fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivplan.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivplan.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b0a3d9-9cb4-56b9-b079-8d80737d61d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivportal.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivportal.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a850838-9c82-5e11-bf3c-ca433cdec29e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivraum.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivraum.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad93d354-349f-54ec-861f-fe381d2dcbe3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivseite.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivseite.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4ead0c-fec0-5711-8868-ba7f12ebc1fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivstatus.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivstatus.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db5c34a-a800-5095-897b-6a202a51fd96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aktivstruktur.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktivstruktur.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28934b30-7c85-5e9f-9623-e88b32c08092","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: al-office.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'al-office.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897b1a27-70b0-553e-b4e5-264dee03d3ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aladdin99winmy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aladdin99winmy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d57064b-d286-55af-b102-6dd88294e234","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aladdinaiproject.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aladdinaiproject.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b3ba50-f4f9-59eb-9fab-1c39c13d74b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alaska-travel.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alaska-travel.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae5f746e-44be-5174-b403-1a3172c2f6aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alawadhicorps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alawadhicorps.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ebe858-e66d-593a-9f24-854cce8b63fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alawin.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alawin.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad432f6-f557-5d19-b074-33354cd452d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: albendazoleonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albendazoleonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d6b67f-5094-50a6-a6ba-36df5b8345a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: albertapmts.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albertapmts.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f94b82a-cf42-5e64-b3d4-64a8d27e58a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: albioncredmere.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albioncredmere.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d5f660-ae3c-5f1e-8d82-ec4beca131ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: albionpeptide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'albionpeptide.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2815cbb-9f4b-5aad-ad52-f51488c563fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alcapone.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcapone.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39dce032-c41e-5a07-b356-d422c96ad111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alcarriaesmas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alcarriaesmas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03714e40-e323-5b05-8bf9-5e1bdc2460cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alchemistai-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchemistai-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e74e38-a12b-5612-b806-4dc9c40567a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alchernix.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchernix.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d7eba0-26ae-5a95-8ed8-805c1ff5f3f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alchernix.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchernix.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d89d77-cb95-5c91-8f95-1ade29531054","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alchernx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alchernx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2139c1c8-9012-5008-8d49-6c356f05c21c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aldurexmonqira.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aldurexmonqira.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc01135c-5858-55c7-9220-556426c7b3a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aleo-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aleo-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f93246-e362-5c7d-a504-833fa5520c8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alephiumallocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alephiumallocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d03c13-1166-5a42-ae93-96abe8bdf38f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alert-bofa-en.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-bofa-en.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121581ed-7dff-550b-8466-008204e7256d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alert-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c905ec-85c6-5ae7-b6c3-8d8d2e241433","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alert-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8d3914-b383-596d-82a5-d0303ed029fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alert-notification.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-notification.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c531dfa4-4253-5cd0-aca1-c38fc24157c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alert-security-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alert-security-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd0a67c-f265-58d7-b5f4-86850184db55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerta-acceso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerta-acceso.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7023c0a9-f172-552d-ab8e-06cd58f2bbc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertas-clientes-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertas-clientes-web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d3475f-79c2-505b-8cc8-fd81f1884bb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertas-gestion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertas-gestion.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1d404d-8e66-5673-a071-78d5453d648b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertas-sms.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertas-sms.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5525b1f3-0a5d-53ad-b9ca-0e04fb6e6a71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertas-webgestion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertas-webgestion.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd0d021-b10d-5e94-8aa2-3ab270996c85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertcibc2web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertcibc2web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c40d346-5bab-50a0-b92a-012694a97cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertcibcwebsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertcibcwebsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f52282ba-4a82-5662-a562-b8e6dd877f1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertid73997.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertid73997.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d40018e-cbed-5ffb-b0d1-ce5284a03ea2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerting-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerting-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b82e50-59a0-5b28-8ebb-9ca7382f6da7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertmobiletd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertmobiletd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7deb08-1918-5af7-9953-e7f6c4d56247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertmyzelle.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertmyzelle.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--babdb2c6-2c84-5882-9dd0-869afa376725","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerts-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e655b9-52b8-5bca-8235-5d0c87505446","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerts-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fce7b6-734e-591a-a962-3fd018e4a465","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerts-vodafone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerts-vodafone.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56be4ac5-ef2f-57ce-884d-e89bfc24d54d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertsecuritycibc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsecuritycibc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--102265e2-806b-5496-9be6-1fe1765c2a0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertsetuptd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsetuptd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16dc6579-484b-5712-a271-87553795429c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertsnotify-interaca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsnotify-interaca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cff0dca-494e-5682-becd-b2cc8104afa2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alerttdbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alerttdbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--935f7e29-942e-5271-98c4-8c57a2d90c97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alertzelleactivity.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertzelleactivity.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28966812-1c9b-5b5c-8e46-82d15807f4e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alescoadvisors.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alescoadvisors.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cf3244-e7da-5d57-944f-05c5df03cdde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alessandrohub.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrohub.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd71a487-23a6-55cc-b041-9fb25a04a69b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alessandrostratega.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alessandrostratega.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a41838c-137c-5c1f-82da-be7635b8f496","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alex-presale.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alex-presale.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22cc525c-4c99-5fb2-bd88-0ffa3ea89f73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alexander-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexander-casino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a5f675-9bf2-514a-8bce-fa74d09c0355","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alexbecks-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexbecks-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6562fd5-f844-575b-b7b3-a289ef391e2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alexcsss.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexcsss.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73cf9170-c99e-5120-9700-998e087d3c6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alexionus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexionus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29a3f751-5d0c-5d13-bb80-eb85589855b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alexonlinepharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alexonlinepharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8401baa-d133-5a8b-bfc4-f5872ff8a59b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alfaxel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfaxel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a714ec-a5aa-5319-a7ce-f1d9a02399b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alfcasino.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfcasino.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab0c12c-f3e0-57f4-91f9-519e28e64dc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alffabahis1260.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alffabahis1260.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304fd757-d9da-5eed-b97a-63bd3ade9046","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alffinitycfu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alffinitycfu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--239b506e-2c6d-510f-b0ca-48839d11c0a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alfirsgordoneldra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfirsgordoneldra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13570bf9-6718-5e5c-b69d-fd7e8fe52086","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alg0rand.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alg0rand.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99076355-9ebe-5dc3-82ac-05becff1b124","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algarvecasinopt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algarvecasinopt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--747a7195-7662-5e0f-b228-c1ae74bc53f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algeriebet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algeriebet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf00a6a-edd6-5484-a985-a0a2b90c732e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algo-orange.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algo-orange.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12511c48-67b9-5060-9462-56f2a53355f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algo2nest.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algo2nest.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26db9e82-2887-5219-8f26-febfdda65af2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algochips.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algochips.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06f9680-3b9b-58ab-8010-8136ca6d9eda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algocompliance.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algocompliance.foundation']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf74ec66-dd41-54f1-8f40-037aa9ff5ce4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algomint.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomint.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca02db4-bf69-569c-b1d8-f3c0ad39b871","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algomint.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomint.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e1f3ad-bc72-588c-8abf-d4b1ad93eb71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algomint.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomint.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6967a7-ffd2-57a2-bf3a-55519b80b8c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algomintlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algomintlabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d985e0a3-fe7e-5920-b2c8-c3fdba37e3cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algorithm-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algorithm-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda4c167-fb38-57b1-9ff0-c55160619c71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algorixtrader.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algorixtrader.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d153765-1cdf-55be-9191-7478c919af56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: algoryxneuralstack.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'algoryxneuralstack.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ffac4f3-09aa-50cb-92ed-d05383f71646","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alhamdulillahzaynab.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhamdulillahzaynab.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a4e625-54b8-57aa-86cd-1b2c6f30f0e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alhudassc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhudassc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--333ef087-14be-5b69-82ad-4ec7b0e1346e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliansspecial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliansspecial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e1b2dc-1b62-5aec-ad8d-498906379443","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alias-darkmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alias-darkmarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c17ac9-7dae-58d3-922e-d08ab6cfa34e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alias-darknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alias-darknet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7bf488e-3b2a-5844-880e-99f1c3c58b3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alias-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alias-market.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d2345d-2557-563b-8b98-db090b932231","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alibaba-top.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba-top.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95672947-3134-51c4-a43d-63e171303708","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alibaba19.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba19.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b454823d-91f1-590a-a681-efe897c06cc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alibaba66winmy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibaba66winmy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b157c-5f05-53f1-9d18-5afc8d92b261","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alibarbarflavoursau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibarbarflavoursau.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e804b55-20c1-53c4-a75b-0e6bf92eb797","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alibarbarvapehubau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alibarbarvapehubau.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0559c098-2dee-516c-b7a9-f5590caa3c6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alienbasepool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbasepool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16740e11-eff4-5c3a-9c9e-cf4eadeb9209","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alienbasereward.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienbasereward.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c438c28-458b-535e-81cf-9e94fea7ab23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alienxboxchain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienxboxchain.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e6a2a4-fe49-5cd8-b393-a330831087c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alienxboxlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alienxboxlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27178cd-9a28-55c0-9357-1004712b9719","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliexpressservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliexpressservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d63c9c8-9575-52d7-b80e-ca6531469103","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alignedlayer.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alignedlayer.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--520ac362-3de5-5282-9fb5-d881490251a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alinixio-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alinixio-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--501cdda4-6ad7-584c-b558-b328ce4aa1d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocation-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocation-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be9cfe3c-9185-5653-a6db-22f099397d51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocation-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocation-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02de49ea-5adb-5eef-b335-f6aead992dd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocation-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocation-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c213e82-9691-5658-ae6a-f6b9f99efed8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocation-soneium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocation-soneium.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efeaf8bd-966a-5e33-8dc6-f3d53d4a7d33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocations-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocations-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2505a38d-0adc-526d-994f-2e37bd5d26a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aliocations-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aliocations-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e29673f-5ab9-5fa6-8325-d114f1d4c569","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alisultan-samsi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alisultan-samsi.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd436f19-6159-5b4e-9056-4cc2cdb402ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alive-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alive-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53918b67-51ec-59ba-8024-7857ce68a1ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alkemeins.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkemeins.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b64ec1a7-c40b-583c-8b57-e1f66cc6492f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alkotas-fintrix-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alkotas-fintrix-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c797e23-ddf6-59f4-bbed-9fac38958e0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: all-med-rx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-med-rx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f22ee8-2ab3-5c29-95e0-c284d490ffb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: all-recipes.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-recipes.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177151f9-6250-500d-ac71-ad3a5d3a0054","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: all-slots-casinos-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'all-slots-casinos-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35126d61-bddf-5224-9be3-98851a03d4e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allaes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allaes.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e9bba9-435d-5f7d-83c0-b770ab564beb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allday-collection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allday-collection.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d5a97e-0bcb-5330-88db-e09ff7fee09a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allday.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allday.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b941a741-9055-50a4-8170-fccf8d73ce0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allegisgroup.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allegisgroup.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c1985fd-2808-5a7c-bdf2-a9a89b480332","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allergistnecessity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allergistnecessity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164a7eac-3d16-508d-8f21-b8db53a076d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allevmclaimsite.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allevmclaimsite.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--503361c8-f43f-59f4-8ccc-e9e3eb9ee003","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allevmclaimsites.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allevmclaimsites.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db0e18b-68a1-5850-819f-df214d5df353","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allevmsdropclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allevmsdropclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--792b8c33-cd14-5ab7-80d8-a114e1c67c79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allicabanksupportdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allicabanksupportdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--466709c3-09a1-5216-96d8-83b23da9802e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allicasecurelogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allicasecurelogin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b399591d-de84-5d1d-a220-515875cef0ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allinbetcasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinbetcasino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--093be08a-6896-50f3-9c02-162dd572e87c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allinbetit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinbetit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d06bd2e-ce4c-5e0f-9e15-f554fedcb659","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allinbets.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allinbets.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c224eb4-8e49-5cee-8d62-8f8e43d2f008","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allington-advisors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allington-advisors.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6407af-9f93-5d7c-9b51-2bc1ae691b07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allivex.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allivex.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1b1b7f-4b90-5550-86ea-b5f48077323e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alllangg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alllangg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce4cf51-6ff9-5705-8ffc-80ed990e4193","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc2d546-a88f-5c0d-9519-6e0b9b0bdd4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f40ce9b8-f0b6-5bd7-bc98-228508183186","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-basedbrett.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-basedbrett.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3865d9a2-384f-5ffc-9cee-3c47323add89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-blackbull.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-blackbull.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412d3e6-ec3a-52b4-9962-a26adca92fdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-ethena.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-ethena.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbf69c09-9f0a-51d7-99cf-3de2a1a93ee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-ethena.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-ethena.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29cb6ac-2f5d-5864-aae1-52e106f53289","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-ethena.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-ethena.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7226850a-f0c3-50b0-9f14-9b35a3700ad5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef02e80-8f86-5442-a42c-a6060d3743cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-firelight.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-firelight.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c87f9f1-e720-5677-aff3-3c118bdf2e80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-hyperliquid.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-hyperliquid.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7425e8-a2cf-59a0-936f-fa937adb5b78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-intuition.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-intuition.systems']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df04fee-1569-5dba-b769-8e1a1bd415fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-monadvm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-monadvm.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f7fc475-4295-575c-a2d9-2418ca84488f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-ondo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-ondo.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0471454a-cbaf-52f6-b357-56ef7901b00d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-payai.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-payai.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9908fe-3dfe-5b1c-930c-74a00e2396a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-pfpepe.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-pfpepe.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e6772d-c5ca-5406-b2cc-1d3e480448f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-pippin.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-pippin.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d5e9351-0622-585b-9843-063d59497815","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e271959-cf65-57bc-a03f-bc70fd5ff84d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-wojakmeme.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-wojakmeme.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e56ed8-01c9-520c-a9a6-9284dddb56a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocate-xrpl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocate-xrpl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09963438-52af-5b04-83df-a127a288a41a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocated-pepeunchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocated-pepeunchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2ef45f-eaa4-50ba-bdbd-c2f12f417c4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocated-wallstreetpepes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocated-wallstreetpepes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a3d835-05d8-5bbc-9f79-6659deb66990","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocated-wallstreetspepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocated-wallstreetspepe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1751b11c-c1cf-510c-9db0-b438905650f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocates-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocates-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc8317-c4b2-5ce7-8638-f5bd4b602d9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocateusdt0.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocateusdt0.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd18d59-f2a8-593f-a64e-bfa82bc827ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocating-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocating-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e511bf-236c-5c12-b412-3ad653d8b10d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocating-monadevm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocating-monadevm.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--327e1188-dcdd-57ff-8214-fd6aee0e19ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-0x0.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-0x0.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ef8f78-339a-58b4-a9e7-d1d92dda96de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aave.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aave.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3eee484-2c24-54e2-825f-acf487fdcf61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aethircloud.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aethircloud.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f916fb-9d85-5194-b7b2-e7fe3f008598","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aevoxyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aevoxyz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180cd51c-c0ce-5ea0-b7ee-3d1acc64b7db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aleo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aleo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ccc180-95d8-55bb-84d0-9414d3e270f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-allora.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-allora.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--220ae55a-a443-5ea2-834c-26186d299887","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-alphaofsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-alphaofsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ab431be-39f7-52b8-be6b-643a0eb05cc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-animecoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-animecoin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd63e84d-d443-58a7-8dd1-e0c3a4b2032e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aptos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aptos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccda841-b307-5ad1-9cb5-f05fee55ac0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aptosfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aptosfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaab6398-75bc-5d56-bea3-be909d52b547","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-assisterr.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-assisterr.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea572133-cf8e-53e6-8237-63aedc437cb5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aster.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aster.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845ad6d3-aa96-566a-9472-086c9172534b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aster.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aster.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24169cd1-8675-5ec8-948f-873e2170e974","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-asterdex.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-asterdex.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cb5e826-d318-5c11-ac8f-87061e76fd45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-avail.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-avail.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da80bb6b-987c-5d8c-8fbb-2e0900b0e262","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-avail.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-avail.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d0eb6d-15c3-5071-9d26-ba1f881639e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-avail.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-avail.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301fd3df-baa6-5a22-82f9-a10e157bf949","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-availproject.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-availproject.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30652d78-02f3-5a73-bdb9-69f8ed2177a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-avici.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-avici.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34eb07be-ed2f-588d-8e63-a832ccb4b5fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-aztec.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-aztec.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6f71b5-2e5f-53df-84d5-79cfc48194d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-babydoge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-babydoge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b2aa5a3-fdca-5b76-9a9c-b19a082458c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-babylonlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-babylonlabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9914aea9-72ed-5ea3-a511-fc263c469af2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-backpack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-backpack.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47904d6-8f34-53e6-9ca5-448062cc63ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-bananagun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-bananagun.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cb8431-9fe6-598a-9186-e9842df0d244","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-beefyfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-beefyfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b06f93e-209b-5058-ae4d-1000e741e0a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-berachain.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-berachain.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c4956b7-29ed-5cbd-8d72-b2c02dae10f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-blubtheblob.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-blubtheblob.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c6396b-bbea-51df-a13a-47dd3edc29cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-brickken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-brickken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27bb599c-7d92-5ee3-a30e-06c84b9f4a37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-burncoin.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-burncoin.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49327cad-f11f-59ec-a4e1-765e6bc037a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-cascade.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cascade.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa56d3c7-33fe-5041-8b65-da67c02895ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-cat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d527dd56-dff5-5e58-b761-d74f5f0ba76d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-cateoneth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cateoneth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c5fb9d-7d7d-5979-9fcd-9f61d44277eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-cbbtc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cbbtc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d561a66c-c543-5cf7-8b89-b8212f099530","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-checker-scroll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-checker-scroll.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--401640ea-f6b1-505b-8964-fd3f35d3ba64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-checker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-checker.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb599ca-7131-5fcf-920a-6ea9f41b65fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-checker.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-checker.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e924fc6-9b2c-556d-b458-045d859c7722","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-chillhouse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-chillhouse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c310cc5-e5fa-5e17-81af-a94e91901fc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-covalent.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-covalent.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23d737e5-33e6-5656-bcb7-1b85aafe75bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-covalent.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-covalent.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b87b2dc-c48e-5bae-9ebe-1ffa62f9893b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-cryptoallstar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-cryptoallstar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cbaa6d-1c86-5fbd-88d7-ac0df819efff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-dbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dbk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07034be-face-5379-bef5-d2d9829e6e72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-debridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-debridge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85217cda-2144-58a9-b337-0e58562c7051","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-debridge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-debridge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cb3d87-c11c-55b1-a76b-07829ac6401d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-debridge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-debridge.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee373c64-9fbf-5c4f-8253-aa27f86c720b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-degen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-degen.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da435909-ad35-5100-b4ec-0c7372a3ff8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-degen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-degen.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306a544c-d1a6-5412-b04c-978162a68064","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddf212f-ed65-5edf-a04f-a9d69d9e691b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-desyn.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-desyn.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ce26d7-5089-5a44-864d-dbc77b75325f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-dogelonmars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dogelonmars.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8637c16a-a729-5f3a-b932-6febe2d42254","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-dydxexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dydxexchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19cdc031-fd4e-5717-9d3d-282b43b7176f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-dydxexchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-dydxexchange.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae41512a-4671-578c-8708-d1e1e6ad8787","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigen.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigen.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba3bae9-4416-514a-b063-30b7b10d13c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenfoundation.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenfoundation.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fbe94a-3c6a-559e-aa03-471c44fcf0b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1aa14c-5b9c-5aee-9284-f4099d577924","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenfoundation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenfoundation.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f0d1d9-9e99-587a-bef2-2c79041dab41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenfoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenfoundation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2a167be-92f7-5a3a-ae93-da657b3b81e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenpiexyz.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenpiexyz.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f95c930-3ada-58ed-846e-1fa707056316","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenpiexyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenpiexyz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9eaee0e-f2bc-51fe-9ad0-d77c13455852","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-eigenpiexyz.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-eigenpiexyz.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3487095-6607-567d-9e5d-c6d15c9f144a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-embercurve.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-embercurve.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c9031e-dc8d-51c0-940a-737c390220ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-embercurve.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-embercurve.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d4c76e-12e7-5423-ada5-d2b9beb28385","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a155950-90e8-5e47-9049-5252feb6f378","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-firelight.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-firelight.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d511e59-37ee-5217-b8ae-f2465d057c21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-firelightfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-firelightfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea85a44-3d94-50a0-81a2-3fbcb1ba9c7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-firelightfinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-firelightfinance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caae404-abaf-55a6-9673-1ad632cfa66a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-flare.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-flare.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a4590ac-0d87-5551-b783-a7cc8c5aef0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-flare.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-flare.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2677e8-dc7f-53de-97ab-b163ec95b928","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-flare.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-flare.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfaf3cc-84b7-57ad-a5c4-3fd37717aa4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-flarefoundation.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-flarefoundation.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4376dc36-5a20-5975-bf83-7d9171e8dd3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-fuel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-fuel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592a8c9d-d7cb-5427-9067-c45da5ec9e74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-fuelnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-fuelnetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202ddaab-3ce0-597d-8459-1339c9c46b78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-galxe.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-galxe.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e9cb9fc-b604-5853-89d2-1acc84cd0be5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-galxe.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-galxe.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652039af-e747-5166-82e5-20fffe3ff5f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-georgeplayclashroyale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-georgeplayclashroyale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83484f8-5cbd-5952-82c7-10f7be688689","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-gigachad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-gigachad.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ec55a5-e00f-52a4-a76c-14d510b831dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-glxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-glxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b86eaa5-6627-55e1-af86-ec6689e60551","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-grassio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-grassio.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1386c0ad-9860-5059-9125-bb00f5844400","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-hashai.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-hashai.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40b0000-1236-5ad5-a6ed-87f121cd2791","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-holdstation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-holdstation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce9cbda-d074-5edf-be89-b23919600246","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-hyperlendx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-hyperlendx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ee3016-36a2-5ba0-9449-c4c0217d084f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-hyperliquid.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-hyperliquid.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587a7bf8-aa7a-551e-bb02-23e04077cca0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-hyperliquid.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-hyperliquid.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f984b4ee-fc64-5788-a759-aca2b43f0b9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-infonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-infonline.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b15811a-461d-5cd9-9982-0a42594549fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-intuition.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-intuition.systems']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac84aa5a-7828-56d5-88fc-1490a51cfc4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-islands.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-islands.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0053aafc-f62a-505c-97fe-c94afbf34df1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-jessebaseeth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-jessebaseeth.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70696ca1-bb86-527b-a6ed-40c71a82afd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-jito.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-jito.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef567626-6629-5eb8-be54-bfc62c6de9c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-jumperexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-jumperexchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b40a5e44-30a1-58f9-bf50-4f3dd60be65a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-juperexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-juperexchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--519508e6-26fc-59cc-8452-5498c571205e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-jupuary.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-jupuary.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f23ff8-be37-59b0-8236-1e5532cb88bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-jupuary.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-jupuary.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--899933ad-5e5a-5b9b-9e6a-d3201dacb386","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-karak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-karak.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea2f2b1a-093d-5677-81e6-d40a07eaa8ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kelp.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelp.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29a5c92-6bb7-5278-a2a6-9fd07e42630e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a737d1a6-6a59-52ff-b598-893b8f8cf9b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kelp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelp.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2681061f-fdf5-52b1-a511-481aa3b53d99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kelp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelp.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39107572-4d1f-5d50-97ba-3076b4e17de0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kelpdao.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kelpdao.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016aea3b-d8e8-555d-902a-dad140381a8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kinetiq.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kinetiq.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4425aea8-039c-5359-af2d-0837d8821a25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kinetiq.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kinetiq.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3ce2d3-3945-5826-b19d-f3e5331cebc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kintara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kintara.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a463afa3-533a-530c-a82a-4702b27fc7e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kinto.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kinto.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f16cef4d-e5a3-56e9-9d9e-17b4c47d75a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kittenswap.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kittenswap.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd5a8d7-708a-5d6a-a051-c1ceef3c8da0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-krain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-krain.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f5870d-d49f-58ca-818f-a539ab22970c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-kyber.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-kyber.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6568d00-3c55-532d-828c-b8fb1635eb44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-layeredge.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-layeredge.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f64bbfb-507c-5a68-8432-a0a81779d8c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-layeredges.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-layeredges.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f29ec9-ae42-50c6-b034-02bf006223eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-lensprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-lensprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6900d45-edbe-566b-8b61-6d0d763e5184","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-lighter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-lighter.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700f1d94-d422-53ee-90c6-c7ef8282f116","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-linea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-linea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5851accf-6cb9-5e69-ac40-1d8b80138ac0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-lingoislands.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-lingoislands.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32769547-97f0-546b-9364-e3c8051b171e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-lingoislands.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-lingoislands.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ffd1e1d-d0c7-5adb-826c-baca952c7e74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-lobchurch.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-lobchurch.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38101985-ef44-53a2-9f70-26e0770d90c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-logx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-logx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33525823-6038-525d-b6c0-e92e7e67c4d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mantlenetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mantlenetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeaa819e-c771-5a98-9c76-d5000df1940b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mefoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mefoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a830ce3-f9f2-542f-9b46-b595ee23297f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mefoundation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mefoundation.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b37d4df8-e790-5235-a8e6-24fceaa4a7b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-meteora.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-meteora.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba79e46-3020-566b-b973-3db3c62fde98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-meteora.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-meteora.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c7127a-83e8-515f-83c8-10ea1ae1c6c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-meth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-meth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cec026e-bf08-5ccb-a26d-9b216fbd9737","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-meth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-meth.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac3c70f-5da4-5eeb-9f3e-b444b921abc5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-methprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-methprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f1db7b-a511-5723-a10d-c94311a29eb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-miranetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-miranetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecdcaaef-0bec-57b3-9e4f-16083a53144f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-moltbook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-moltbook.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd40ae7-ea29-5ed3-ae33-bb8ebbf62ead","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a2e314-4575-53ef-9124-965870b3ab1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-monadvm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-monadvm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6346b1e-1ba3-5da2-b0f6-2008eb6a16b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-monadvm.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-monadvm.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f7b1ec-1a9a-565c-b553-10edea2088cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-moonwell.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-moonwell.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86110c5b-32c7-5df2-b873-e00fe43ced51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-morpho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-morpho.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5085a1c8-b91f-5f0b-9bc0-06a18f7910bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-morpho.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-morpho.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3964b112-122c-5785-bb15-07a18e78deed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-morpho.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-morpho.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e827a71d-b593-5e9e-af07-a8c57fc3fb0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-morpholabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-morpholabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8792b9-479a-5438-a3d5-9431da77b2a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mstr2100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mstr2100.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a878061-bbba-5be7-bdb3-16b992a78d5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mubarak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mubarak.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6db3c02-b6ec-5d97-ad74-1b285eac9cf7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-mystic.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-mystic.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b1d9bf-9f06-5d48-9521-5c043dc6f050","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-namada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-namada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b7b468-839a-5b02-a988-61954de0292b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-namadas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-namadas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f0bb722-5c7c-5abc-9880-47a9abad0b6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-neiro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-neiro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c788f8-b0b7-5586-afa6-74679b03e1a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-nftstrategy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-nftstrategy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba664269-e0cc-538f-8b13-46fe8f71f6fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-nftstrategy.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-nftstrategy.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a17d08-5016-551b-9d5d-452bec8112ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-nodespay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-nodespay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db14e948-06f3-5bb3-af3c-c342ca141e9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-nostrafinance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-nostrafinance.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cc9738-08d5-53ca-8680-caa6e12b275b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-npc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-npc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755eab9a-3b67-53de-82a8-77d28b329b31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-omninetworks.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-omninetworks.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe4c0dd-8159-5898-8043-52638e4c4fb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-ondo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ondo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29185a7c-406e-5595-8f22-d5ec6da959f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-ondo.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ondo.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c5d28c-df23-5599-8965-b0bbe5e00afc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-ondofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ondofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274e9116-d4c4-56a5-9a26-6d45bc42499e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-onxy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-onxy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b275b4c8-f3cc-5398-ab9b-72206d65502e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-onyx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-onyx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02247171-577d-52a3-a462-c13ed4a279a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-op.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-op.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb8ba31-d30e-5337-b093-533d02ccda9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-openexnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-openexnetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0de3898-657c-57ff-ab1e-0c5b8e18015d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-openseafoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-openseafoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3303307b-a4bb-5b08-8873-414af2ef6dab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-opstimism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-opstimism.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4fcaa6-0ff0-59ef-a280-a989dddc4681","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-orderlynetwork.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-orderlynetwork.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--754ec201-c68a-5bdf-9f97-f0eea7d41bbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-orderlynetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-orderlynetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f24c9e1-0c0f-50d8-8e54-e2c173d7c486","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-orderlynetwork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-orderlynetwork.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aea0dbc-e8f3-50ab-a95c-ac906ee969bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-paalai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-paalai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b1bd815-f018-5271-ae8b-afdb00939d8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-payai.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-payai.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f501199-ed43-5273-80ff-ce35ab85a167","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57cc64dd-a7ba-5da3-93df-8f34d20585fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pendle.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pendle.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e92d9e-98d4-5367-95c9-c4e9a5364f03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pendle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pendle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea49fae-5a02-5012-98cb-18ab39944169","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pendle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pendle.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c374070b-c901-5d8d-92ee-61ad286afa23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pendle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pendle.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f1e7ce-9049-5380-9bac-24c82c6f6f5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pepeunchanied.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pepeunchanied.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daccb0fd-95ca-5682-907e-cc761a9e2d94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pepu.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pepu.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--940b1fae-1289-58c3-a5d7-c01687bdf1cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pepunchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pepunchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c518f190-bab3-5965-bc5e-8b807823b1b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pepusunchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pepusunchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc84da4d-788d-5e1f-87bf-e5643b48a211","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pippin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pippin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c6a3f3-5493-59ee-9325-f1d343ca2d69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-plasma.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-plasma.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bbc50c9-900b-5298-a0d1-0976a114aafb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pnutsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pnutsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d61bf75-3eb7-5589-9cdc-216a23685f6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-poly.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-poly.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca068120-da87-58b1-b700-736c81612fcc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-poly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-poly.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29103a5b-5294-58c6-99a9-37b1a8ea060f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-poly.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-poly.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4639022a-e1cf-5598-a366-13cd016a02e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-ponke.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ponke.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c418edd5-108f-5a4d-b257-e3bfaa71e4ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-portal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-portal.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e49d716-7658-56ea-a572-74c31def3a04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgy.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgy.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55caceb5-f249-5db9-98e2-9ea91dae9f3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30acd8aa-573a-5846-9700-387392e5f01a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgy.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b500db6-4fc6-5685-8f24-44787324f69b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgy.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e53a5cdb-0d9b-5a80-8162-13c99b175fa2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgypenguins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgypenguins.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3d20ca0-3d62-5f96-8c8a-146b76b4afdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-pudgypenguins.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-pudgypenguins.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065a5098-8e07-5b45-b7b4-0e6778d9e54f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-puffer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-puffer.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7f0c37-224f-5537-b6d3-d63eb1928544","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-puffer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-puffer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f96d466-3f21-5bc7-aa4d-ac9ed19943c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-punch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-punch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd080ce-1584-54e0-892c-a3931db365db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-quick.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-quick.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b5cbb5-a309-5bbd-977a-73702e8da863","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-rainbow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-rainbow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5fc7c6-9e88-5b9d-b1c3-b1e2e1b48bc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-rayls.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-rayls.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1fb2294-0cc7-56af-b21f-f0b478ddd56b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-re.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-re.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--915a891c-acdc-5a64-82c4-0a43b8cf98d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-recall.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-recall.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08523ea6-e564-5ada-9d53-62096b8554ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-redstone.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-redstone.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a159b7a0-f393-5e35-b3f6-96f877e24de1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-resolv.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-resolv.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b579bfb-a6e3-50b0-b8a9-4673458f3577","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-revox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-revox.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18101a44-8d8f-5b44-be0b-b8d373f5c822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-riceai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-riceai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6ff435-3647-5ee5-9aee-5d3da0a19808","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-ripple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-ripple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--927ffb44-fe24-5b25-b26b-bc19d79f7e4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-saharaai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-saharaai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18ce4d5-53e3-5d34-9626-fc208616cc92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-sapien.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sapien.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8110f3a-63a5-5659-8068-7a241bf5af9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-sceptre.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sceptre.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b8336e-22e9-5b52-8cb5-a0f83c36603c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-scrollnetwork.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-scrollnetwork.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d2b6cd-c1c7-5b03-8f32-153ec7d1586a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-scrolls.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-scrolls.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8605dc09-bbc1-5358-b94e-284811813381","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-shifu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-shifu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4ce313-3642-5f67-9643-184bddfe7111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-simoncats.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-simoncats.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--758d1f72-63c1-53da-85fd-074b645d2b0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-slerf.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-slerf.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e487e2f5-aa90-55d2-adea-c80ac86edd9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-slerf.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-slerf.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c216659-5e11-5af4-b5e1-a95496fb236b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-snowball.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-snowball.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9869a39-127f-5da5-91a8-d1f82def3e93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soinclabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soinclabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9721d416-1301-5c4c-805a-18dbedd91ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soinclabs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soinclabs.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87a79f64-472d-5b9c-ae9e-d3324178dc63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soinclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soinclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--521d3abe-f316-5a7a-8184-1f39655162ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-solangelescity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-solangelescity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05accb2e-032f-5f6f-af50-98316db46bcf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-solv.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-solv.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a50ec4-9767-57b3-9857-c7b36f72213b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-sonic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sonic.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a748a51-8993-5149-bd9d-c535168925be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-sonicgame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sonicgame.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb6c1188-a133-5caa-946a-4c9126e7bfd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soniclabs.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soniclabs.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd19188e-03dd-5cee-a5c4-3988c076a061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soniclabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soniclabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60cd2f4a-4f79-5373-83c2-de9604a15f5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-soniclabs3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-soniclabs3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e855932-3495-58a5-aeac-2f6f54a7811c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-spectra.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-spectra.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0f4b6b-5e2b-51e1-b3de-c188e6e8955e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-spx-6900.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-spx-6900.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b6c5c8-e5ab-55ad-a712-59cc4765d78f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-spx6900.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-spx6900.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc8a676-4c2a-510a-b797-047c488baa3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-stable.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-stable.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5cb56a-9fde-5dde-8332-478c39d864f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-standx.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-standx.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--867e2b21-7ef3-50b1-b0da-a53520feeccc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-steer.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-steer.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c662642-e356-5218-a4e0-9c925cfe2c07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-store.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-store.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e072aa5-3e0d-58ff-9476-b4a2519b0ada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-streamflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-streamflow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6203b3-878b-58f6-8ed3-b1117fdf152b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-sui.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-sui.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec2a8c0-4dae-50db-8f0a-5331918b4175","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-superchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-superchain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddc8152-6c32-5093-a7d6-8a8ffaf02bb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-swanchain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-swanchain.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fcbf7f-75d3-5ca2-a808-63cbfb9bc23b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-swell.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-swell.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3c1012-33d5-5596-842c-a5059880ae24","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-swellnetworkio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-swellnetworkio.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--058b4f63-a582-55ea-8197-cf2804410d9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-symbioticfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-symbioticfi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--728c75ef-aeae-5358-aa3d-e9fd642bb3f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-symbiotlc.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-symbiotlc.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5ef689-3070-5c18-9839-c172f5ac214b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-symbiotlc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-symbiotlc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49186a0b-2e06-5571-97b4-9571366d926b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-symbiotlc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-symbiotlc.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2a04db4-169b-54af-b2b6-cc6dbf87575b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-symbiotlcfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-symbiotlcfi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db22ae58-edf7-5290-b68d-397523b769e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-taikos.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-taikos.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b86add1-2d19-5401-863e-c7efe6e3af1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-tapswaps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-tapswaps.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf669d1-770d-5668-a32e-51c1a056f15a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-tea.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-tea.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e409ef64-5609-50a1-a176-c8682909d537","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-teaprotocol.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-teaprotocol.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d37c68-4c17-5c32-9ee9-668ff7900ee5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-tensor.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-tensor.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bce75c1-7dc5-5d78-909a-affca9a343f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3f6a44-45f0-588e-8052-8f2b20b04991","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e19179d-4c10-531e-8a2f-3ad15ad8d2f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-umbraprivacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-umbraprivacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bd5247-0187-5d36-9be0-8da01567da33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-updates.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-updates.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d639114-579d-5ece-aa51-ecd0dabe4d65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-upshift.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-upshift.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--542d7a67-3253-5ee1-bf55-b3e3de4d621d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usdai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usdai.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc912cca-e3d4-53c7-9b45-96b6f45ab592","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d47d9a7f-9eb5-5f39-8d61-30067f8a94f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usual.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usual.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--642fd018-5af4-5b23-95d8-7820861249b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usual.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usual.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd96032-ee80-5141-8bb0-4b593bfefa12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usualmoney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usualmoney.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6df40f6-a8bf-5594-9602-ca3be7bb9cde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-usualmoney.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-usualmoney.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e46a6a3-7747-5c80-8edc-ec3acf98b197","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-valor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-valor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dab9ca7-5a7e-5744-bf00-f5210e74efbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-velvet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-velvet.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada8fe38-fa73-547b-909d-3d6efa4fd799","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-virtuals.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-virtuals.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7bd2c23-77de-58f1-9a26-463499271222","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-voltrwa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-voltrwa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa5b8462-1bff-579d-b94f-b7f7cc6bcf0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-wallstreetpepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-wallstreetpepe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95260f8d-9ce0-54ea-ac59-8fe406e5bee6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-wallstreetpepes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-wallstreetpepes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2132bc53-c4fa-5e70-9dce-271bb629ad71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-waronusd1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-waronusd1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043496c2-e745-5189-964a-2ac50ba318e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-wbtc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-wbtc.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18fe9bea-e85e-5193-95bf-92eb92a85060","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-whiterock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-whiterock.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba41fd42-993a-5b5a-acc6-fd5e4a783158","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-world.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-world.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d905b7fb-048a-54d6-8fbe-542dbae24c66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-wormhole.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-wormhole.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c419aba-1635-5fbe-96b3-1871107b0c9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-x1e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-x1e.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676d1675-2e19-5188-8542-e800b41ad661","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-xrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-xrp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92b4743-2202-5239-9cdb-7d001a1d8901","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-xrpl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-xrpl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc40a09-22a8-5270-8ac4-2b6f53653603","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-xrpl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-xrpl.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6d6a34-96c0-5be9-a542-51d27b9c057b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-yellow.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-yellow.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7c4956-7e9a-591f-ae61-f24d3f73bc85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zama.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zama.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--300e3e10-1bb7-5455-bba7-91092d224470","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zama.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zama.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a58e56-9627-591e-9d4b-d018797dc2f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zeebu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zeebu.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de88a0fb-27c7-5a75-96c6-70b58bc67044","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zipcoin.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zipcoin.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1aa82e-c5e1-5382-92ca-01b8f4f63efd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zipcoin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zipcoin.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5539da-fdb0-5e9c-b620-ce8dd8ac9909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zipcoin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zipcoin.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f40ac053-d05f-5374-802e-2bd68075dddb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocation-zkpass.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocation-zkpass.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2175a970-f096-5ecd-9452-41964a5e3131","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationbnb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationbnb.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47911fd-bf3c-5d76-abe3-59c5c546c555","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationcanadiennetravailleurs-gov.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationcanadiennetravailleurs-gov.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35deb3f2-451d-55ab-9862-1e95f8c20f61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationcannadienne-besoinsessentiels2026.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationcannadienne-besoinsessentiels2026.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b8e28c-9338-5223-97e8-364290aa11dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationcashcat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationcashcat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74bac6c7-2a23-579c-8769-097885507df8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationcashcat.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationcashcat.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea15071-3815-5047-bf7b-68ea16ff4aec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationenergieqc1nfos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationenergieqc1nfos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6430785-11ba-5f83-816e-f0709a706aa9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aave.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aave.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--943eb552-33aa-5bb7-bfbd-886ef56e6738","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aave.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f59b3b8b-36f2-566c-8fef-4d1d083e998b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aave.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aave.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cc85a4-8df6-5a19-9dd3-62dad0bfdb35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aethir.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethir.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e36839-535c-527d-93f6-102f1dd7399d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aethir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2459e9ae-a7ff-5413-9640-98338578c21e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aethircloud.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethircloud.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8559ff8-4d57-5722-a34d-d75ee892e13b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aethircloud.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aethircloud.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd86eece-5a8a-5a74-9d0f-115c635ad8af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-aleo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-aleo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570c84a7-550a-51d1-9319-79235a9c526e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-anyone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-anyone.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfab45ba-7374-5812-83f1-122577d78355","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9c9f4e-563d-536a-a01d-18293749059d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-arbitrum.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-arbitrum.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1d71ae-00e2-5fb7-8672-d77032961eb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e1c6b78-36cd-5cae-bd7e-a8dfd8e072ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ath.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea0942a-f32e-57c5-bd2e-747c057f82ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ath.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ath.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3402d01-5df3-56d8-a8eb-ae300c0b1110","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-avail.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-avail.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e24384b2-e468-5a52-8e0b-349ca3f4e56a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-avalonfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-avalonfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eaa5324-b349-562b-a392-d2a55dbfbe54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-basedbrett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-basedbrett.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f01e633-d693-506d-a815-4181ec79361d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-beefyfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-beefyfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f263ad1b-00cc-5e4f-8789-23cd884a1825","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-cashcat.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-cashcat.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae7c3d42-ee2c-52e1-890f-0e6c7b42960a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-clipfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-clipfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f8312c-5a3e-5dfe-a132-97ea6552f8be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-colendxyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-colendxyz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68917ed4-1aae-5744-a233-845cd7224527","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-convex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-convex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e9e4fd-5106-56df-8985-d7f4c5c5b9ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-covalent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-covalent.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf4883a-b5f6-5a23-ab29-48590ccbe237","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-covalent.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-covalent.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a96a5d7-c716-5c79-aeec-449ed98a4827","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degen.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degen.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6271de07-ee41-5f26-bbbd-541aa559d3b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9290945-a8a7-521c-a973-3d941f6359df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degen.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93367b43-c2a6-59d0-875c-35443eaf04c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degen.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e802507c-31fe-517d-9aed-c80842572d95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degen.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degen.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b0053c0-16a7-5677-879a-20b3910f171c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dffd633-28f2-51d4-ba8e-c4f67a21462e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-derive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-derive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b42cfa26-d3f5-5112-9b4e-6e524ef7b822","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-dydx.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-dydx.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70dfd883-fd58-5150-9a70-2a6f9c790724","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-dydxexchange.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-dydxexchange.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804b1417-9eaf-58d2-b6b5-8bd5338dd68b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-dydxexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-dydxexchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4326a9cf-c97d-5b4a-9962-60ebb87b284c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigenfoundation.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigenfoundation.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f331214-cda5-5544-9730-0b4872a04dae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigenfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigenfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b51dc94-8b6d-5067-9462-6b28082e436b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigenfoundation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigenfoundation.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a081cdf7-9fae-5a16-b8fb-484684627642","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigeniayer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigeniayer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5583d8a-ebdd-59a9-91be-d4c28cc6f3a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigeniayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigeniayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54685a9-bee5-542b-938d-2a4e5009b0db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-eigenlayer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-eigenlayer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e693c9d-430e-55c9-9273-ff83f2cdc0cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-embercurve.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-embercurve.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03fbc2ef-8f42-556b-a3a9-96fe09dbd90e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ethenas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ethenas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec35b3d-1b9b-5001-b40b-c0104841a56a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-firelight.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-firelight.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba1cf7e-f4b1-5cb2-bfac-ec1d4a80f0bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-flarenetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-flarenetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c79339-0b79-5169-b5a6-420dd7ed9987","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-floki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-floki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae302226-f0ec-5982-93dc-04171671729b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-galxe.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-galxe.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc3a28a-9985-5646-9cab-ba02f2458a5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-galxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-galxe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d4b910-a430-5eff-98c6-80b99ea45213","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-holdstation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-holdstation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33d597d-bcb5-5433-9b16-d0591d826ca1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-hyperlendx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-hyperlendx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b85c6f-2847-5c3b-b8e9-34d800efa18e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-initia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-initia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835bb92d-b87e-5ce1-93af-ac1a95c15e6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-karaknetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-karaknetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--523bca98-bde8-5d93-b655-3633618b11c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-katana.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-katana.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1c71ea-6ae9-5d1f-8b0f-b2aadc472ac0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelp.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelp.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05ca34e-4b6b-5a6e-ab83-3f7734881b6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee905ed-2fa8-5d80-8372-229c60e784ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelp.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--397033f8-1f1b-5a13-8d5e-f17c9f211523","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelp.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4aef9f6-c57d-5245-a471-360c57e845a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelp.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f52b2a8-27c2-5635-af38-500aa18e21ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kelpdao.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kelpdao.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--352c99be-586b-5e79-a571-723845de0d4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kinetiq.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kinetiq.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b450ea4-2f9f-593b-9f28-b9a0f4fd8591","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kinto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kinto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2a948a-fdf5-5b8d-9e7f-2fbe869261a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-kinto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-kinto.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12066c1b-f56f-555e-bb5c-ca99dd4a6846","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-layer3.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-layer3.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6e8edf-eb87-55a8-82b7-962c483d9320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-layer3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-layer3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--947a16af-d067-552c-8201-df3444838fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-lineabuild.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-lineabuild.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784840c0-8484-518c-9d02-f2ea16c92ec2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-lxp.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-lxp.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465b7aa1-1ba6-562f-aedf-af9336e59be9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-makerdao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-makerdao.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb5371c-dd28-529a-9af4-4676d6a551cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-mantle.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-mantle.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3dd700a-1a74-5b8f-9579-331ed98affa2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-methprotocol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-methprotocol.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d4dbcf-2701-5a63-abcb-4b0eddd70091","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-mitosis.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-mitosis.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f098497-97a1-59e6-9d9d-356ded46f39a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8883eb31-2061-5850-9f99-235af8158104","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-moonwell.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-moonwell.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc2d0d0-a5a3-575e-8ad9-15eb51014f68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-morpho.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-morpho.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4edd242-ff93-56ff-be80-989cc5852868","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-morpholabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-morpholabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14e919d-0d3e-582b-8afb-6e0e18795b76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-nexo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3bbffce-dd0b-5590-890e-5ba4f22697e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ofc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ofc.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e329ee7-b796-5d26-be7a-9275631cab35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ondofi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ondofi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a9143b-e05d-5e6a-a1c2-604c42dae640","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ondofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ondofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c711e71-dd91-5615-8090-f214c7bf98b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-orderlynetwork.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-orderlynetwork.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e14e585-8174-5f02-8fd0-9f62686950f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-orderlynetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-orderlynetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aee1e0d-fd9c-5fce-8454-b6a0d8481464","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-orderlynetwork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-orderlynetwork.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94067525-2e0c-5761-95fd-28945e4c0643","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-orderlynetwork.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-orderlynetwork.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bd4e640-b198-5d16-a983-600f18f23a5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pendle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pendle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a6eee02-87c3-5ff5-baa1-031408d65e1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pendle.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pendle.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cab2b8-f0d7-5c2b-a382-bb79839447d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5beb19d-ddd2-5ddd-b90d-852820acd003","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pendlefi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pendlefi.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abfd14d-d347-5c04-86cc-e7bc115bff29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pepeunchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pepeunchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd07b1f7-ce26-5abc-a5e9-78a0686c54f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pepunchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pepunchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88956744-4ba8-5d11-ab64-b3960e534a44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pinlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pinlink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad7759a-a213-571c-a804-3fe7354faab7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pinlink.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pinlink.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fa5acf-cfb8-576a-97c9-eff4806de40d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-polymarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-polymarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f239f0-7529-5dfb-85a7-38e644f52584","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pudgy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pudgy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2070e698-c51c-5d0c-866e-f3a7b4efb4a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-puffer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-puffer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ae317d-facf-5f83-a461-584d5381611a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-pump.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3676ae3a-3e00-5974-af7e-197dc3bbb808","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-quant.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-quant.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df13ab5-a3ce-5bcb-bdd2-3d9c5a6e3be9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-realio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-realio.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d58ec5-902f-5b0f-a22d-9ba29e6a9833","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-recall.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-recall.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b024131f-11e1-5d81-82bd-bc5a05d4af2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-rich.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-rich.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7106a2-ff40-5655-b758-50e5a86df953","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soinclabs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soinclabs.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a7256c-21d8-52a5-830a-7a4e1f41556f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-solv.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-solv.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5dac2f4-5f56-53d4-aaf6-f3ba27ba7cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-solv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-solv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf235be0-3d38-5b85-885c-67302b3f4ca6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-solv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-solv.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f99aa16c-638f-5de2-bf42-652c2c9a980b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-solv.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-solv.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f900ec6-1d7f-596f-9e2c-6b1caa6e8515","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soneium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soneium.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e8efaa-ff14-5ead-b407-0f088ffabd1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soneium.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soneium.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e03e593e-97b7-548b-89cd-d1012367ec3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soniclabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soniclabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f0dfdc-598c-57c1-ad2c-ee38c7eed5ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soniclabs.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soniclabs.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574e8da2-cd5e-5500-a9b6-5fefb0ae3564","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-soniclabs.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-soniclabs.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebfe7204-6688-5f5d-b1ef-ae6bf29103f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-spx6900.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-spx6900.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2962c4a0-cd4d-567a-9136-9cd00e09a395","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-symbioticfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-symbioticfi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c860e3-dc44-59de-85e8-4eac149228ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-symbiotlcfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-symbiotlcfi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--938337ae-a3cb-51f9-aea6-9613023a982a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-syncswap.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-syncswap.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b37650bf-5057-5987-bb6b-2ee0f6fb8da7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-teaprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-teaprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a02ded04-764a-59ae-aed8-8b42bcca2e42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-telcoin.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-telcoin.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208b1703-881e-53fd-8e58-9e693dbbea46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-towns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-towns.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1e47ed-8293-54ce-bf53-9692277ffb48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-usual.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-usual.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4e64f4-93fd-5d36-86df-c41e97a2d121","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-usual.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-usual.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d6db01-1dd7-5823-8825-c251dd848d52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-usual.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-usual.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d9be17-9e02-5153-964a-f8786cfd2388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-usual.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-usual.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e2728c-7d23-565c-9141-e6c2238ef5f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-usual.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-usual.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2873a07-dbdb-5fe1-a97a-822a977ccdf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-ventuals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-ventuals.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d957a8-d662-571d-a88d-0b7c3b043d99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-wormhole.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-wormhole.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--562954e1-e8dd-53d6-9fcb-389c0c3bcc71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-wormhole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-wormhole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d14a10a-66a0-500c-93d1-14d3636d644c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-wormhole.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-wormhole.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee6e980-436d-5793-822b-10fbdef90eaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-xrpl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-xrpl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0eafe34-952f-5f40-971e-2fef52b82665","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-yieldbasis.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-yieldbasis.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--144ff0f9-f0af-50c5-8b4c-30cd9eb4c675","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-zipcoin.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-zipcoin.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b288cc0f-80e0-5c14-958c-9b7223985283","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations-zipcoin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations-zipcoin.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9152f5a-b1a7-55c0-815c-e75087d43118","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580ca9df-a232-57f5-ac41-3f0cc41f66ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocations.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocations.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9210583c-86e5-55c1-b6a3-3541177dad90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allocationz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationz.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b8cc85-c279-5462-9af2-1efbc6e16074","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alloraclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alloraclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfe19839-3eaf-51d7-82e8-1197153c3b5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alloraclaims.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alloraclaims.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5206b2b-dbb9-518e-bfd0-676df02d6d50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allovernightshipus2us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allovernightshipus2us.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd8ec49-3210-5440-b363-08f707c90ffd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allow-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allow-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32dfa0b4-3aa0-5947-86c9-0dacffd10d23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allow-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allow-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--298de7b0-e861-5002-97c7-b136753cfd37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allpsdtemplates.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allpsdtemplates.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1bf7f9b-9969-560c-a7e6-5726b3589eff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allrealdocuments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrealdocuments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--296bbcc7-ec1c-5bb0-a6b8-b55a03f3d172","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allrealgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrealgroup.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bf182b-971b-5423-b72b-1f5c711e41e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allrightcasino-pl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allrightcasino-pl.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b933dcc-d650-531f-8031-eb2ded9a3539","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allslots-casino-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allslots-casino-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aaca1da-9e1f-5a38-9fba-0c47a46486b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allstakes.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allstakes.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1ca0e2-a85a-53bb-8979-813620813623","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allthatporn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allthatporn.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79d3ef5-d4ca-593a-99f5-c9bd55c869a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allupdatenow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allupdatenow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd582282-fb71-5141-81cf-f06984a7eac5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allvaultclaims-blockchaindisbursal.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allvaultclaims-blockchaindisbursal.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26652e06-7525-5563-84ae-6806991a7c57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allweed.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allweed.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e81c7b50-cac9-52fa-9b2a-a36b2b110342","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyedgeassetspro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyedgeassetspro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e54ee0-69c2-5a1a-8f53-19c7de0294a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyhaychinsun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyhaychinsun.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f164fc43-8491-5568-a579-53331b7093ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyoucanwatch.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoucanwatch.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9949ad8-da1d-59ab-aaeb-ce562eb316a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyoucanwatchtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyoucanwatchtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8bb973-5c4b-597a-910e-eb2e62bdb784","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyouneedis002027.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedis002027.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed566c02-5246-5bc1-b0bb-5897813f0780","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyouneedis002029.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedis002029.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c0f073-83a3-5a78-b5c1-fe0ceae19a21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyouneedis112023.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedis112023.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4d0548-1f32-5ef0-8668-4969d19d5199","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyouneedis112025.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyouneedis112025.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1946c12-7229-55a6-9e90-19c16c015e89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspin-casino-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-casino-ca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d44a51d-d572-599d-92a0-8ab7ca7b3bc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspin-fra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-fra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe3957f-1f8a-57c9-b487-0476aeb4c954","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspin.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c427b315-26ae-580e-b612-c158f519ce90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspin1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin1.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f6ef33-9911-505f-8017-867517791181","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspincasiino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincasiino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e64ad0a-a8b6-5e34-b57d-03e333ef30ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspincenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincenter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9043a37c-15e0-5892-b06c-58662b1c5887","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspincz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspincz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee76584c-d757-5d52-b1e5-4d0db1bb24e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: allyspingames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspingames.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b9de10-e27e-5b33-8a96-2a58d92a89c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: almanakclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanakclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46af508c-68d9-594e-bd8d-6dd0769bf32d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: almanbahis-giriisteek1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanbahis-giriisteek1.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc2b30f-f3ba-5cd5-8289-ad7b3b4c327c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: almanbahis2026orj.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanbahis2026orj.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a8f195c-be7a-521e-908c-54e1289c37f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: almanbahisonline.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'almanbahisonline.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--291fb189-50c6-5046-9201-341dac0a2afc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alo-bet-yeni85.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alo-bet-yeni85.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd5a573-c370-5130-a3ec-4d4795d55012","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alobet-csn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobet-csn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f668fb8-2278-5b4f-bfc4-5a039e9b5399","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alobet-girissadresim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobet-girissadresim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03e43b0-38f3-53bf-adf3-6cd0676230f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alobet-mblgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobet-mblgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccbce38-e857-5af1-a030-0450024c4df8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alobetadresin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobetadresin.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f75973d-edbc-54c5-9f64-bc478a5c8a07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alobetweb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobetweb.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6c8182-3247-5821-a353-7809ee34e113","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alon-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alon-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accdfd36-f55e-51aa-970a-a73ba36915e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alon-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alon-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f43a532-6e46-50e6-a1fe-f612326e32b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpacaclaims.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpacaclaims.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140ee43a-4876-55db-bd5d-3007caaba500","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpaguadenza-it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpaguadenza-it.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95deb43-562f-5255-a941-dab92d339173","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpen-advisor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpen-advisor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9b8b2f2-60a1-5319-92b3-180f5a995371","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpencoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpencoin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613b2368-84b7-5a47-9e1e-d0fd45ceeb92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpenwertor-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpenwertor-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6ebb68-abc8-5d96-96db-ee98bfd43197","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpha-berachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-berachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7935ec9c-b480-500d-b27a-ac132bc3cb27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpha-solana.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-solana.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4730dda4-6f7f-5bfa-a15f-330033170ab4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpha-solana.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-solana.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca76cbbb-55e5-5ab1-ab5c-74e8a93a2302","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpha-standx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpha-standx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1940d57b-398c-53fb-b740-641bdb43c8fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphamilex.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphamilex.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc601508-bdfb-52b8-b699-f292a6213696","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphapepe.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphapepe.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e6727f-85d7-52b3-93ba-fc3cb5af45e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphapepetoken.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphapepetoken.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc818c4b-7c3a-54e8-80bd-3397046e2e13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphaplex.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaplex.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92749ef-a1bf-5a40-9da2-4461321e71d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphatradeai-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphatradeai-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c322200b-90db-5571-94d6-01882216bf25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphaworks.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaworks.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0061ffe-0aa3-5951-ade7-ef4f221146a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alphax-exchange-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphax-exchange-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d19b0f2-2e34-5789-9839-0c22eed09bf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpine-nova.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpine-nova.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed8e067-c595-57b0-9aec-bc66b819f86b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpinebk.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinebk.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65050849-e1ba-5bb5-a330-c2c36e1059d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpinemarket.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinemarket.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecf0e99-96b4-5418-9062-197fcc4050bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpinemarket.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpinemarket.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9f4cc97-8249-5b36-ade5-3eaf7047feb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpition-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpition-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02812028-d870-567c-b102-5ecb2f77c2fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alpoms247.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alpoms247.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ad9ace-7ec2-54d6-bbb3-ea87bc453d01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alqattaa.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alqattaa.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6781354-ba9e-5eeb-be2a-aa2e86c18ae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alrdrop-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alrdrop-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe2b76d-db46-5656-8e2d-fa80cf1d01a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alreviews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alreviews.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd03ddcf-ad0e-5274-bc71-0713182e972a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alrswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alrswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a74962e-68fd-529a-9ffa-c8b82fbbea36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alsanabombe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alsanabombe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a13a98b-fd06-5518-8bd6-10e890ea0d62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alt-bot.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alt-bot.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bd05c5-44f8-5b5c-95da-a476f19bb886","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alt-layer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alt-layer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3bffae-f6cf-5afb-8419-7601caf19c2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alt14.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alt14.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32934be-1df4-591f-8869-4264439a48bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alta-peculianza.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alta-peculianza.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5545ca6-1390-5e74-882a-ae03757582b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altadefinizione01.racing","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altadefinizione01.racing']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4440b9-0a92-5448-808e-bda309c42385","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altarioveyron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altarioveyron.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f2254e-3280-50a5-a41b-e5b9d280fd5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altavernomirequiel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altavernomirequiel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e11ef58-5dc6-537a-889a-55ed00eab9df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altaxvista.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altaxvista.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ad6d54-eaa3-54aa-b8ce-2a62de139569","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altdefentifier.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altdefentifier.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2de2db-cd42-590b-84e6-5c1fb64d9c4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altdentifier-api.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altdentifier-api.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505b316b-22b7-57c0-ac50-f748b6cbd83a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altdentify-api.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altdentify-api.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6803a171-89dd-5d9e-a4d8-49001b8537d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altdentify.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altdentify.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d70177-326f-550c-aee7-fa5c5845915e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alteractive.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alteractive.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6563eec3-7bc0-5db8-a1bf-21898f6c5011","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alternativadeguiassantacatina.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alternativadeguiassantacatina.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--381e6534-3bfc-5be3-92e4-c3f4f3cea330","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altidefentefier.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altidefentefier.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e084039-3cf8-5167-8aef-fe458080928d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altidentifier-api.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altidentifier-api.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9687e56-5912-586d-a948-69de16bc126d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altidentlfier.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altidentlfier.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3da8b8-4f99-5f38-9621-6b48c317ed19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altinkapitalpro.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altinkapitalpro.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bff1057-4777-5761-b9df-9ab004c7a704","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altinn-skatteetaten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altinn-skatteetaten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb121a0-0f11-59e1-82dc-baef1bdfedbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altinnskatteetaten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altinnskatteetaten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b841a505-86dc-540f-9846-5c54b196afeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altinnskatteetateninfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altinnskatteetateninfo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0dcd94-ea1a-5cef-bdf2-89ef7ca00a05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altisfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altisfinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb7a55a-65f5-5d3b-8451-cc4e5e8a8247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altrenixordre-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altrenixordre-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bca6c20-3ba0-5fd1-b334-84bda0979859","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alturatrade.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alturatrade.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa39f1ba-315b-555d-885b-24b03b8359ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alturax-voting.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alturax-voting.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f25ae7-1772-50c6-b360-1c3d5640e7b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altverify.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altverify.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab67169-9c78-5fa9-89a6-632d942e0ad4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altverify.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altverify.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f512f89-e660-57bc-b425-8d98cf1afdaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: altverify.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altverify.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118dfcef-3de6-5ba9-a185-57977908277c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alveriotrade.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alveriotrade.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e279b26-fcd5-536c-b722-15a93bb6d2fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alvex.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvex.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e6e547-03ba-5674-b7b5-e30228e85d6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alvrixtrade82.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alvrixtrade82.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c748ce-b753-540f-8c04-5e2524162890","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alwaysdoingtheonething.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysdoingtheonething.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c2c401-a476-59ce-8848-adeac51a9d5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alwaysdowhatyoushoulddostuff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwaysdowhatyoushoulddostuff.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c1704f5-3a8b-5ed4-b93b-d83b8d80de71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alwsys1edc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alwsys1edc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d62121a-7439-5423-8c1f-c12c84b5609c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alza-bitmarea.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alza-bitmarea.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71d67da1-7de9-58e1-824c-f161176983e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alza-fondavikk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alza-fondavikk.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a39e0a-6be2-50e6-a950-0d714a3a9a1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: alzora-invyra.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alzora-invyra.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7660be8-61dd-5e31-8a0f-ed349f5b3b63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: am-autosales.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am-autosales.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cb132f3-b6c6-5361-a54e-f5e317d0bfec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: am1-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am1-trustwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa09f1a-e4b7-539b-b195-3f93a93bca71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: am1bot.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'am1bot.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a00e11-7074-5cd3-920f-ebeabeb8bf77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amadinetv.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amadinetv.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--633e7434-4c5e-5292-b195-7e37536e1be2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amanairbet88.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanairbet88.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b51f2c-0ca2-5486-91a4-a5dfa56e4582","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amanzes.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amanzes.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8579e29d-9226-5cef-ab9e-aa9944b2bf94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amarincorpus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amarincorpus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a200423-8050-5c43-ab0b-5454a55fc6d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazing-medpharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazing-medpharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b8825f-a499-53de-9297-1901af3b3603","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazingempire.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingempire.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3839eb7c-a309-595d-93a7-1b1544efd978","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazingfamilymeds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingfamilymeds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485a0996-2eef-502d-92f6-556f6ce040d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazinglinkzeus.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazinglinkzeus.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f850f80a-bda6-5ca0-b72f-e549ca9f4e94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazingmedspharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazingmedspharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53de2996-96de-56da-ba84-33c8677b3216","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amaznterms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amaznterms.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ec256e-ce03-52a8-8480-62e2de1dd2bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-aide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-aide.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a339994b-d399-5f39-8a18-ed835054bd0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-slots-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-slots-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3469cc2e-ae14-52cc-9798-ea7f667062b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-us54.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-us54.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a48370-1dd7-58fc-8f67-003e5cc73a08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-us953.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-us953.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--707bbbc5-4010-5fa6-903c-1612bee2cb6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-us98.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-us98.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9852f6db-2d69-56cf-9d5e-ead5ffdac934","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-wireless-keyboard-2-4ghz-typewriter-computer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-wireless-keyboard-2-4ghz-typewriter-computer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca80694-1089-5e8d-a10f-bee60cc6618d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazon-www-prime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-www-prime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4fd5f14-103e-51e4-84f2-709f35213979","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonbulkliquidationsexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonbulkliquidationsexpress.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e5ae97-7587-5f29-aca4-fa45988266a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonca-prime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonca-prime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18fff4a6-ae10-5233-8234-e0f7c5e7d9bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazoncryptocasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoncryptocasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0efb0997-169a-540e-b938-2d58c3d802c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazone-prime.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone-prime.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb57ca9d-4cbb-52c2-bafe-a8d716eaaad7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazone.zone","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazone.zone']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b9d75d-8484-5840-a4d8-1ca37a433ddf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonecomsourcingdirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonecomsourcingdirect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b7840b-9e07-5164-8b35-7d9305aa3dbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonfshr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfshr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5404ebcb-0e3b-5647-9c4f-b27ad2e7c4b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonfsolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfsolutions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12eb8ab5-8a0e-5c63-8987-a31cbf9f9c0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonfssystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonfssystem.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96dce0a-f4b7-5bee-af73-8bb015447580","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazoninternal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazoninternal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a996a2-d88f-5a76-b1de-d0896b731570","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonliquidationsale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonliquidationsale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d5dbd47-bb05-5661-846e-34972c1dc204","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonmegawarehouse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonmegawarehouse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fa1d26-f1e3-54bf-b9f1-bc447673feb5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonoffers.sale","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonoffers.sale']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf138408-7577-5f65-b8b7-7ddfa9359025","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonprimeprep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprimeprep.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a7528c-c71c-526e-bc29-29bbaabc42b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonprimesub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonprimesub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee961ac6-9cfc-5bec-9557-bef8a4896a9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonslot-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonslot-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e514b38-b08e-545e-bbef-ce7221516e12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazonwireless-keyboard-2-4ghz-typewriter-computer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazonwireless-keyboard-2-4ghz-typewriter-computer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c8d61a-2c62-5c53-b27b-ca374916ec4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazpalettes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazpalettes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7fa7e3-8fc6-5b0c-b327-e8dd1b2772d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazprimebox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazprimebox.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f43abc-beb3-5043-a0bd-7d2ebe1b2e38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amazron.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazron.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacab0cc-2a62-5fa4-b89f-160edd3c4bc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amberflixtv.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amberflixtv.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83bcbf6-39df-5b76-8600-7ea874d25383","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ambienmedication.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambienmedication.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5e6d032-34a9-5009-941b-784768a6aee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ambiosclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambiosclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f6318fc-51ba-5f05-b7ee-0c3258066ce0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ambusinessassist.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ambusinessassist.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77569dd-f3ff-5683-a2ba-8ec18db8de9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ameli-france2025.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameli-france2025.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82660eba-2832-58b9-93f4-4d71dbfe63b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ameli-mesdossiers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameli-mesdossiers.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e57b566-4cc4-5db0-8d6b-fe57d47fb683","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amend-aprovalclaims.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amend-aprovalclaims.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62236e20-edad-5b1d-9b3b-c5fbe29465d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amendeebbouvs-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendeebbouvs-fr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83525113-c252-51d5-950d-05c7bbc9c878","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amendes-service.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendes-service.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7d83732-540b-53bf-82c8-34f6bdabe591","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amendmentw-xrp-watch.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendmentw-xrp-watch.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5843c60-60f2-57e2-a21f-b1852878b41d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amendmentwatch-xrp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amendmentwatch-xrp.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4784eb-0e6e-551e-a5cb-0918f7c273d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amercafirstcu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amercafirstcu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3ad119-1df5-5f5c-8f7c-2c16ec100be3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amercafirstt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amercafirstt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61807bc4-f413-5dc8-8aca-8f5d4ec23517","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: america-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'america-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73dfb54c-f94f-51fa-84ee-cad5251200bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: america25-2x.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'america25-2x.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ece999e-0759-5a63-ab78-e10980fd6e5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-account.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3db395-7bf2-503a-9a6d-82537d0d3eba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-authentifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-authentifizierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a731c5-473a-55c5-a0ba-5d36275e512d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-checks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-checks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71757b2c-c755-572d-86f4-10190ce8976f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-einrichtung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-einrichtung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdd538b-bc54-545a-8ddc-d887fb0a10fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-helpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-helpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ba250e-fd2f-55a8-958c-aacaf76f5b0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-ident.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-ident.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e6c173-fe37-5029-8998-c2d1e662cc48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-identity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-identity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad82b2f4-fcc8-5e5f-b6f6-124b505c46a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-insurance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-insurance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca98a3e-c808-5693-92ad-e38eead1c8c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-key.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-key.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16dbf74-2eab-53c0-bb9a-3692193ec39e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-keys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-keys.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cefff6a-8e3a-50b1-aaef-776901e33ebe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-kundenservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-kundenservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717e6a61-2dc5-5088-bfa5-268e5ad76356","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-nb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-nb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874aeaa3-b3d9-573c-8dfa-f747bab8dc1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-partners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-partners.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a754715a-ca05-581b-bc2e-43df6364dafc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-recovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-recovery.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9e39fb-ff7b-5bb8-b59a-d94559724806","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-referenz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-referenz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e022f958-f4a2-5f29-8626-70058936eae7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-safekeys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-safekeys.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb8e58c1-9209-5ddf-aca1-6fa652ae82f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-safety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-safety.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e06ace-d53d-5f5c-9a9b-2743c31b26aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-safetykey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-safetykey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77156039-d57e-51ac-91be-886c5eae7cfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-schutz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-schutz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2130ee4a-b5a3-5d16-ba40-e37db1bb0845","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-service.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417095d8-331b-54f0-afc6-fbffac5b3c29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-services.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-services.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--018593a8-7740-567e-b855-95a7363b77df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-shield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-shield.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05a92e9-0dac-5c5e-a7dd-f480d5598495","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-sicherheit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-sicherheit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1224a4d9-14d0-5759-aac0-410acffd2e91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-sicherung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-sicherung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10797f95-22f8-532c-9bca-3fea0ec79e50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-support.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1164a9fe-70c1-5995-b884-4dc02cea47bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-verification.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2fd59c-d39d-52b0-9161-006f173a5bb4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-verifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-verifizierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a95d881-6d19-53f9-9b48-7ada48be6b8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-versicherung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-versicherung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48edad0-8480-540f-863e-0caea38a0e4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress-vorgang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress-vorgang.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acbf895a-618f-5615-be7e-7ff30178fa4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpress0nline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpress0nline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b632b043-821a-5c95-a3f7-1ca237307b3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpressprotection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpressprotection.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870ac465-fdfa-595f-862f-718ed21bc392","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanexpressverify.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanexpressverify.support']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7ab221-9482-5a83-b834-ef3473deeb03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americanliquidationshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americanliquidationshop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f50bb8-318c-5bcc-9e45-31ad90b50407","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americantruckssale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americantruckssale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b6c6b5-f390-5d8b-a456-8cfa7769a2e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: americompanystarlux.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'americompanystarlux.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0043f387-a9e3-5578-ad00-8db18d96d8d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amethance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amethance.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec46f20-14f5-535c-928e-22b9e3b02b22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-connect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f34f28-993f-5477-a099-66db0971ed60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-create.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-create.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c5f5aac-6552-560e-8865-59b9bcf78949","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38baf583-e839-5699-9e0e-ba07ee1ea2e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-desk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-desk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7fba1b-e56e-5330-988f-c05594d20aa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-hilfe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-hilfe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--177021b2-8277-53bc-9758-91613bbf1dab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-ident.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-ident.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63cf6451-181b-5bb6-ab70-5e8630c14644","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-partner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-partner.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc85734-1bb8-5538-a779-0533a749b191","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-partners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-partners.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7a42d49-33b5-5d17-a585-7f212c269232","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-safekeys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-safekeys.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f5c256b-d26c-55af-97d8-e1bd315f6955","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-safetykey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-safetykey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab82ef6f-678a-5762-ab5c-1ac108e5203f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-save.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-save.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89291cd-ca4f-5277-bc27-b48eb072c979","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-schutz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-schutz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29158376-6c5e-539b-8838-618752a0e49c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-shield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-shield.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabd62bf-44df-5253-9d5f-8f40a2e12645","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-sicherheit.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-sicherheit.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c702457-83ae-5a4e-bf3d-ee18d65bd579","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-start.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-start.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8691849-8484-56c4-862f-1509f5d55be5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-system.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-system.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0613f943-ba63-5f61-94e0-ccc60ed793f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-verifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-verifizierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec768bb5-38a1-502c-8a9a-86f85aa15023","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amex-versicherung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-versicherung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9700a4b-04ce-5870-a053-f290cdeb0907","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexgftcard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgftcard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ade4d8a2-00da-5977-a98a-0ecb82f34890","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexgiftcardbalance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcardbalance.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74ad6da-25ee-5239-a888-07da5509e584","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexgiftcardbalance.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcardbalance.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6986f6-345c-539e-9f3c-c6fa39d1c5f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexgiftcardsbalance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcardsbalance.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21f173ee-804b-584b-bb73-4d265adcfe12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexgiftcrds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexgiftcrds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6097bcc-5991-56ed-a775-1fe896abdd17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexofficial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexofficial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea8308b-0acd-5417-9687-7f42c622978d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexsupportdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexsupportdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028f60c7-bb23-5a34-9f3c-b683d104a28a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amexsupportlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amexsupportlive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6dbb6e-2ac2-57c0-a266-205f971efa32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amezon.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amezon.dev']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae2482c-22bd-5520-9683-dc2849009c96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amg-ailesiresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amg-ailesiresmi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f95da0-bb93-5ba1-836a-3e246215c806","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amg-ailesiyeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amg-ailesiyeni.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1765638-c101-52f7-9750-b9b65ad59d6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgailesi-resmitr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgailesi-resmitr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75e96190-5e45-5354-90f8-fa376a9fc793","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahis-firstbqhis.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahis-firstbqhis.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb6022a-4b48-5029-a429-26c1d9ec8a9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahis-girisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahis-girisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e94562-a403-525f-9b87-5f1328f57ff6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahis-orjinalgirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahis-orjinalgirisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0980b7a8-7252-5138-aaf8-ec4dd62d8478","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahis2425.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahis2425.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741025fc-479a-58ed-b763-bb9b61259f68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahiscasinogiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahiscasinogiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91309e77-4352-5225-ac9c-b80b88b0b8c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahiscasinogiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahiscasinogiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff6772f8-0a19-59fb-9eb0-ed032c43d291","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahissamg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahissamg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ffddcc-bc38-5e34-ac1d-82720e5e990b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amgbahs-sinirsizerisim2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahs-sinirsizerisim2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9106bc1f-4665-5907-bf08-b3e3a54b2dba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ami-capital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ami-capital.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb4b2a7-964c-5462-a48c-2d4ecc95f2c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amicapitolex.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amicapitolex.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5cb9b17-c2b7-59f9-aefd-5d237b00a8d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aminixio-official.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aminixio-official.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33fd5079-7146-5801-b1f0-e7d65f150c5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amiradcheckupserver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiradcheckupserver.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5145b4cb-e108-557a-9b0b-3092d16e9056","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amiupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amiupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c6bb16-d1d4-5632-a0f3-3703721a2e3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amkbet451.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amkbet451.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6deabec-d5a9-5ade-87e7-dc977eccb770","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-authenticator.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-authenticator.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59c1a971-5c4e-5b66-89d1-cc60aa7fb865","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-bot-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-bot-trust.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24214f66-8556-571f-851e-f505ad1a1ed7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-check-processing.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-check-processing.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d067f736-a414-5fa3-8d94-490b9889750a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-click.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-click.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93282316-c907-50df-999c-57efc51f4e25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-funds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-funds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed060fc0-310c-5c0a-90c5-ea78ea987f1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-funds.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-funds.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddfc5b09-3f8d-5c25-8251-2f208c1ca00a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-funds.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-funds.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d2d8f0-ac6e-568f-bfa0-f1fdbb670a74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-looker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-looker.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a383f0b-d3b1-52c1-9fbe-28cdf4edcf3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-riskscore.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-riskscore.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c1e996-4ba3-53c9-ad8b-53c8b1ef7d08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-tracker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-tracker.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94350a37-fee4-519b-b656-ad7b235a5221","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-trusts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-trusts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cce6c10-d9fe-51a1-b4b2-bd0d47b973b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-usdt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-usdt.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfe7f0a-e73e-53ae-a57b-bc6126982c15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aml-wallet.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-wallet.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e94e16-1aa1-53ea-be34-750bd6fa4794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbot-telegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbot-telegram.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3eb386-3877-5c26-9a7a-8965db2c676d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotfilter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotfilter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb8ebff-e383-51d8-a6a0-83c80843191b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotlite.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotlite.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e873f9-f2cd-5126-878e-a26692f31817","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotpro.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotpro.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dc32a4-5acb-5844-951d-2b3526663541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotprotect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotprotect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d987534c-6363-517c-b1c8-d6d812f5634b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotsafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotsafe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a2201-dddc-5ccb-a74b-3aeb369842f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotscanner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotscanner.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d55b0e-17da-5564-948a-1062e8be02e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotscans.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotscans.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1bc9d6a-c798-5b82-9aa2-0c7dfca292ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5a6215-5811-5728-8bb0-421b899b74d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotshield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotshield.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19df44f5-ffe8-5872-a962-02eab127f527","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlbotsolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotsolution.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1eb300f-66b9-5beb-a099-7c2893da8b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlchain.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlchain.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad24fc8d-1918-58bf-a4bc-4e5ad897a320","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlcheckapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc97660-b39c-57fe-a756-e895df1a513a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlcheckbot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckbot.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca85234-5a3a-5cd9-a2d8-9ab15207ed3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlchecked.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlchecked.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e34b2c0d-cbae-50af-a88a-2572e657f080","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlcheckerbybit.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckerbybit.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac20e3e-f9f1-5d0c-8bb2-c4f81ffdaf11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlcheckerbybit.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckerbybit.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a058afd1-90b0-5c84-9f53-a1deb6f2ff1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlcheckings.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlcheckings.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2838a037-57d7-5777-bdff-838ced897ae0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlclean.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlclean.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07144bc9-f377-56c0-b1f6-e9cc646a771b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amldetectionservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amldetectionservices.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ddce8a-f43c-56ee-88ef-b2c4ef1f49c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlibot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlibot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156252a1-7fa0-5ebf-aa74-d1aad576a763","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlnagroup.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlnagroup.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1d2ece-56cd-5c3a-8cb1-f42b1e4fa11c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlofficially.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlofficially.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--446c2fcb-f3b0-5438-9c12-767792c7dc7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlp2p.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlp2p.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5165490a-9933-51af-ac3f-9c4628dcfdd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlradar.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlradar.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c43de9-e4c9-5add-8a03-6bb0d9f27630","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlregister.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlregister.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c3435e7-9488-5894-8699-223888a82760","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlriskservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlriskservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--124685d2-e061-5185-b1e8-5668b3f5ff85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlsage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsage.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--028a112d-5099-58d6-a59d-01fe302a87ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlscoreslookup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscoreslookup.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d9b5b1-391f-5fb9-b2e4-cb73108e8c5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlscreeningservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlscreeningservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5cf408-7f4e-58e5-ab79-bb7949677abd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlshield.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlshield.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4486d7-697f-5a66-afab-01daa9dcf7fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlsolana.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsolana.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e36e7b8-0ffe-52c8-8d89-81c0974d2bba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlsolbot.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlsolbot.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648b5490-2b68-51dc-8d4d-267703697c02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amltracebot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltracebot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32decbdd-7e70-5148-b458-87b3ad83a593","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amltrackbot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrackbot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--784ed7f6-1fc2-5ed3-ae25-6d3b23016bb4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amltrust.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrust.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335ccac3-3d54-58aa-a3be-f5892cd39917","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amltrxtrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amltrxtrust.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19f129d-a162-5f8b-8f35-28def2c3c106","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlverif.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlverif.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b8e41e-cedc-52e0-a20a-bcb4da91801a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amlverify.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlverify.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d01c1a-d516-55ff-b353-060a46342ade","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ammee.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ammee.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f4798b-e76a-5efe-90f7-e459d380858f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ammmp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ammmp.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b45a792a-729a-510a-a02d-f976c5aeb357","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ammsac.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ammsac.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c38d4d-ec6d-5d85-82ae-a659382e93a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amnis.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amnis.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--580b96ad-8fe6-5f1e-9c62-105dfcf12521","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amobonanza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amobonanza.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2567e482-8883-53b0-9c36-96a3bd764ae2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amonbet-casino-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amonbet-casino-fr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa3366d-2425-508e-b51a-e9fb85d72fec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amonbetcasino-nl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amonbetcasino-nl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f486d-efdc-5dc9-bd88-57317275a945","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amonbetcasino.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amonbetcasino.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a576a16a-0d8a-5d7e-aeef-9f1b51ca0370","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amonymixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amonymixer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9258dd-6850-5e95-a453-78bab260867e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amora-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amora-live.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba4022d3-5c4b-544e-a4dc-56a628e0ce4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amouradate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amouradate.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180d94bd-7c0d-52fe-b4df-db8e55157740","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amozon-deals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amozon-deals.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e848825e-18bd-5323-8326-0d63da6f5f0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amozon.zone","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amozon.zone']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd78340a-586b-50f0-abc9-fe5bb7ec7695","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amp-jojobet-bahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amp-jojobet-bahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8246f45e-8747-5088-b8d1-47e04dbc3c04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amphetamin.kaufen","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amphetamin.kaufen']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5866e43-bac8-5936-82bd-0b7756026a4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ampiogestivora-it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampiogestivora-it.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1e64d0-a9f0-5f40-8c84-adefb68a3147","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ampleforthrewards.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampleforthrewards.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f027d5-336f-5f69-adc7-5a3a55252c20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amplerendovance-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplerendovance-fr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72633eb-61c7-5c56-9caf-07e52eaa7562","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amplio-creditian.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amplio-creditian.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dabb295-83e5-54d8-ad5a-a8888a6a782e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ampliocreditian-system.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampliocreditian-system.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5d0315-47ce-57f7-98ce-ec6431f75e67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ampliocreditian.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ampliocreditian.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7006b4-f3f7-564b-9249-f83efd170b21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amsbery.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amsbery.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--485daa50-f632-569f-8657-f22891c33bda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amtrade-kuala-lumpur.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amtrade-kuala-lumpur.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3cf651-b903-50a1-9e40-8dac096a2d2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amtrade-new-delhi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amtrade-new-delhi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac32fb1c-3afa-5f5f-9adb-af9cba6ae404","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amtszentrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amtszentrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4ae8563-d573-573d-ae5e-d9a9f01e11ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amunra-cas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amunra-cas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca8d5f5-03e3-5565-9286-a62473a1a27c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amxgiftcard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amxgiftcard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937831e5-0e70-5795-8ff6-63ffd27a49f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amxlppampc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amxlppampc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f69c73-e675-555e-9d9e-acd72a788f75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amyarostai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amyarostai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05555a32-9814-5f80-a225-d2d0f5db2b01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amzboxmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzboxmarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874bbc3b-b5c3-5a4e-9121-e493ef3adb14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amzninfo.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzninfo.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee2a947f-4b82-580f-9064-955334242865","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amzninsider.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzninsider.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa585ae-35dd-5495-9f80-59287ddb6970","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amznreward.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amznreward.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5fc478-c2ab-565c-8430-f67bccddcdd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: amzshippingtransportation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amzshippingtransportation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0ab431-f0e0-5d27-b5e9-2a703cedc20c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabahis157.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabahis157.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60892f85-2182-52d6-96e1-c13e0617e77a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabahis211.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabahis211.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0b2eb5-d9aa-5e3b-a7bc-cad54b028b17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabellaadornments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabellaadornments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574716b4-c241-5c04-bb02-f274ed34d5a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabica.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e64b2bc-7eaf-5572-81d3-f86f5c425d4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-bestellen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-bestellen.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d271edbd-d3b6-5e41-9085-9afe5b6cda40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-bestellen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-bestellen.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--363fef37-569d-5b3f-9d0b-daa98000ae08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-koning.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-koning.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b15e54-9bd9-53b3-8eff-feceaeb54436","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-kopen.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-kopen.store']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41ff05e9-1564-5711-bb63-ddee75056b9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-kuur.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-kuur.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5cc5ae9-c409-56d5-a776-8b4d6d8a549b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen-nl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen-nl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf7fce6-e5aa-59fa-b0a7-9aded5273af8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolen.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9606c0d6-c896-5ee5-9151-c75e632df072","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolenspecialist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolenspecialist.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a8b3cc6-71fd-599b-92f9-6b1b24f7a160","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboler.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a1fef2-110a-50bb-b134-b27a8a5d179d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolesteroidelegal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolesteroidelegal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b12a5f0d-e992-5399-919a-0854dcab2389","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolfarmaci.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolfarmaci.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a65ea4-2f3f-50ff-bd28-c801361aba6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolic-centre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-centre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3324219-a217-56f7-9b1e-9b35a4105cf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolic-steroid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-steroid.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ec6fca-84b8-510a-84c1-ea6744b5cd97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolic-store.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic-store.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c10b5daa-1795-5b76-ae17-7e77677be0af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolic.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolic.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db887745-9aab-5068-987e-e56c8f994272","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicakopen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicakopen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--566281c3-dc1b-562e-89f7-6453964191d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicdex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f86050e-bf2d-538d-9b25-694aeb088f98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicdirect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicdirect.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b26ff3-8e9c-5e92-96ed-28101467c0c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicgear.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicgear.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7868ddc-d6b3-5394-80ab-8e0b315682f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicmuscles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicmuscles.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d5a825-009b-5727-bac3-e213c6fed57b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicpharmacist.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicpharmacist.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5955b8f-f66d-5db8-a44e-621ed5b498dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicpharmacist.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicpharmacist.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8539a9-fcca-5fe5-aa5a-92e2fdf87be9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolicplotter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolicplotter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4655c9a-c87d-513d-ae3e-2514ce491b79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolics-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6461c395-ee46-5674-bf2c-3c47d11fd478","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolics.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolics.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2a94629-df52-52b3-9997-b589efc70f2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolika-shop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolika-shop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba4e68d7-f52f-53aa-9308-813c0a44e4fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolika.kaufen","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolika.kaufen']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b804cd-71b9-5602-b9ee-c3598a01d29d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki-pl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki-pl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a64265a-8491-5c09-89f8-6f6b59216e5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0158b2cd-b020-5d68-8bf2-f724a89e7df6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e0a6329-dc77-5838-a973-cfcf8a93a1f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki1.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebe20d1-57fe-5d99-b030-30d41d9d35ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki11.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki11.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf30342f-db13-55b6-b5bd-93c9b2f6519c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki12.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki12.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da92d14-adb5-5149-9a6d-29a355806136","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki14.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki14.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba34afc-0c99-5b17-808a-ca991297bbac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki15.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki15.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdcdf51-8633-5029-8b99-162789152a4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki16.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki16.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53a7696d-0511-576b-9ac1-09793ccfb84b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki2.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki2.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0751dd-4b07-5fe0-999c-6aa6c7369cb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliki3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliki3.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f88aa9-4f8d-52ed-80cf-f0ea6ad1b549","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolikionline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolikionline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fbd3b10-8861-54a3-9e63-c3afdad70489","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anaboliquepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anaboliquepro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d43d97-d8e7-5741-874a-93068da059ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anabolx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolx.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5fcfc8-3b7a-53b1-8e0c-beccafb81328","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anadolucapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anadolucapital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efc3e5ca-4b63-5d34-a5bb-de50a802053f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analismail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analismail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b7e443-5cee-5fd7-a36b-ec9300e45d61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analyticape.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analyticape.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0d0f21-49df-5014-8979-802e5816de99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analytics-googletagmanager.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-googletagmanager.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80b8454-8496-5d5f-82eb-9be9ad51115e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analytics-socket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-socket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c4a754-c461-52eb-81f7-dfd1ef9f5379","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analytixflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytixflow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1966043e-d6e9-5584-9f48-a595edd60359","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analyxbiolabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analyxbiolabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dbbafe2-7a48-52b6-b7dd-825e67d5aa68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analyze-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analyze-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b362513c-a9e0-59e4-8a6e-aaed25cfab60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: analyzerdatabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analyzerdatabase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--626a5800-0374-5a17-a574-984d9fb9b7b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anasayfapadisahbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anasayfapadisahbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1339fb0-89fc-519b-a20c-8dafc319c051","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anatomyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anatomyou.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc11aad-b1b3-5cae-9b2e-84204ec25563","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anberryhospital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anberryhospital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--454945b0-2960-554a-96c0-20cd43b5de52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anberryhospital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anberryhospital.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab5136c-f5bc-50a5-b657-5f8709523b22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anbtrue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anbtrue.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--357a568c-f857-51f9-a9e3-801151b246a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anbyt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anbyt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abbfc8f-0fd2-5736-8d3f-271227e1081b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anc8update.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anc8update.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c15426-c502-55e2-bc63-86f4033e2bd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anclaactivanza.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anclaactivanza.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--499f2c80-7d7b-54f4-9458-2f5859715547","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andaresdelaciencia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andaresdelaciencia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7368d3fa-a862-5cf6-8996-7120f5db72a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andeorgpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andeorgpt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce4e9aa-e8de-505e-a57b-c0cd664845f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andeorgpt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andeorgpt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82ea52-4b68-5bb4-889f-3c3c8fc65ba5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andersonbonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonbonline.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd1d9e0-b492-5ac1-addf-968548be756d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andersonbrothersbk.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonbrothersbk.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc8d533-54d0-5469-821c-6c247eada03c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andersonchirowellness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andersonchirowellness.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4892ad2b-9236-5a7e-ab77-1ac53f9e0338","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andinaveritas-es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andinaveritas-es.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f825a9-6ad9-5c43-9c72-88b5e8c51d7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andinaveritas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andinaveritas.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--768a3fb6-f7a1-5b72-a0e1-62ae83d2b9a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andr-appsr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andr-appsr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c20a50e-b434-55e5-9874-a5325bb38473","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andreas-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andreas-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f91a93b-7850-5bf0-9b63-04b49f54fab8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andreyp2p.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andreyp2p.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1f3a01-519f-5afa-aa38-c6dc219f9528","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: android-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'android-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68e10cd1-2195-5d94-9075-8e3c9f71ed68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andy-on-base-migration.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andy-on-base-migration.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232106c9-9c05-511c-b83a-921aca04dfdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andyscrapmetalltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andyscrapmetalltd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae82a25e-e668-57e6-932b-410958dd50dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: andytokenclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'andytokenclaims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df243d14-32fe-5537-8024-a909dc436e76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: angel-drainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angel-drainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c347acb2-329b-5052-98f9-9d184d7b1fab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: angel-uuid.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angel-uuid.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2329e755-4eab-53b9-87df-9b9bbd1b771a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: angelferno.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelferno.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c2264f-e344-5047-937c-3469b2ef7c45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: angelspiritus.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angelspiritus.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c111bbeb-6168-563c-ac24-0363b0fde94e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anglerewards.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anglerewards.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59c1b92d-b2ea-558d-9b27-3c08b2184def","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: angrybagsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'angrybagsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f914297-6679-5ac8-8bec-4e114c62ea25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anh-luong.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anh-luong.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01b4084-d46c-5f50-8123-643264e8c6b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anime-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anime-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0ef6c1-a669-574d-a264-d714f94c564b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anime-whitelist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anime-whitelist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29a48f7c-54b7-5d4a-97ba-bea2a57524f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animeeclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeeclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0c1aa9b-8ce2-508d-a5d6-3df5ec55f8c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animerewardsclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animerewardsclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a85e6c-1f41-5f25-89a8-eb3b03825589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animeszone.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animeszone.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7798d5e-bf2b-58ee-bcd8-0cdc835204f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animetokenclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animetokenclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e8c86c3-d4fe-51b1-9510-0053f093e525","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animetsu.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animetsu.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6456dca6-3db4-5d14-8cc1-e02e50c834b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: animus.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'animus.systems']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6092766a-7952-512b-9354-f2b18171650b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anindaodemelers.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anindaodemelers.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56ab114-33d6-57ab-888a-ab186f02c993","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aninymixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aninymixer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5f7ace-2502-55c5-bf39-7ec9a8877fdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ankrstaking.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankrstaking.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe71c2-171b-5b74-a191-5463428b540c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ankrtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ankrtoken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a65d89-0806-5077-b774-e26ec0b7b876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anlagen-experten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anlagen-experten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--243dcb2c-4e91-5ba9-a39e-814211ca3cdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anlog.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anlog.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f54c60-92ff-5a20-ad30-792cf16eb348","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anmeldeplattform.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anmeldeplattform.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1706c7b7-1690-59b3-b93b-71cbc9aa843e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: annabel-zammit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabel-zammit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c84de195-f7c5-535f-a063-e023cecb2ac7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: annabellestamps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annabellestamps.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--261ed84c-4d0c-54be-9bf5-7938632033b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: annonymously.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annonymously.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d94c390-5305-50fb-8986-e4bb4294b3b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: announcement-opensea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'announcement-opensea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077de8aa-5497-54d9-9535-596462194946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: annual0402idexeccostco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'annual0402idexeccostco.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f02475-a840-597a-9d7e-ba0e16913c9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anodoslabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anodoslabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45825a8e-51fd-54fb-b4a1-d2128547de34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anodosliquidity.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anodosliquidity.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587b6ba5-fa67-5568-8e5c-3083019b9d3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anodosreward.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anodosreward.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c407eba7-492e-5c99-a737-82badd0566ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anoglobal.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anoglobal.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be26839e-eb47-5791-95ab-4da2f610bd42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anoma-og.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anoma-og.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8af99e6-983d-57a2-9cf6-ae193e09397b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anoncoins.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anoncoins.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51568a61-a477-5a8c-8369-126676e6ecba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anoncoinsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anoncoinsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e36817df-a712-5254-b0ae-2c48d01354bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonswap.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonswap.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7380e4e2-cc82-59f0-9fae-349ed432bc55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymixer--mixer.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymixer--mixer.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa1ea98-4264-5433-b1b6-bd27f8ce5800","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymixer1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymixer1.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd90681a-2e23-5476-bea5-91631500d9f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymixermix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymixermix.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aadbc4-f8a1-5205-906a-591429a89793","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymixerofficialsite.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymixerofficialsite.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c3574f3-99f2-5c3b-a87b-acdc7c9779c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymouscryptoexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymouscryptoexchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d9d6d5-2311-5d42-8a45-d2f3292bb35d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonympackstation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonympackstation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--981357d0-dd22-5946-94e9-12ea71270680","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymuxer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymuxer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db938d55-abe1-5505-bc02-690db1d1475a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anonymyxer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anonymyxer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06023a99-1337-5ac6-9e79-1030f8f0baa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anpost-reschedule.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpost-reschedule.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e87e7a-dc89-5b83-abf8-578db64714f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anpost.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anpost.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18db2ee5-0e93-5a7b-83db-8e6408744190","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansem-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansem-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4eebd21-9604-579c-a074-54a343ac4513","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansem-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansem-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a02b50d-63f3-501d-ba62-45886f4c89b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansem-blackbull.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansem-blackbull.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9abb026-dfab-5b9e-8d97-a7a2fe63a487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansemblackbull.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansemblackbull.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7131177a-e52c-5b9e-bdf9-f84a6ce37147","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansems-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansems-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68f32f4-876d-5484-9016-9bb94edfcba5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansemsblackbull.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansemsblackbull.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf1b713-582d-5223-a508-a8f6f509f43b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ansleycapital.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ansleycapital.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ca724d-a979-5ac8-86c0-fc7c17ff32ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: answer-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'answer-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6465c880-5a95-5296-9cd8-7daf4d44aff5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: answers-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'answers-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5c6c01-acb1-50e7-a02e-a3ffc12b6782","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antappeal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antappeal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98b24fe5-2b1e-554c-ac3e-7bd03e9d675d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anthemappeal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthemappeal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e9ac614-cb7e-57e0-b156-2897c6310a4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anthodisk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthodisk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83642e52-b3a2-55c5-88f5-e185cfa66c9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anthony-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthony-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91fb4048-c972-50f4-9c22-7c62819c5390","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anthropic5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anthropic5.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb2af37-ea52-5e0e-abdc-a702039b6acd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antibioticsonlinepharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antibioticsonlinepharmacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5801bb84-8d44-54d4-a5ee-22d2346f29fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antibotredirect.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antibotredirect.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--204f375c-84ab-5b84-bae7-1d5aa841775d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anticheattest.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anticheattest.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c856a65c-ed3b-52f3-aa23-2bd10c47a3d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anticonstitutionally.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anticonstitutionally.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad58ed1-a35b-53eb-b91d-c0000614dc5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antiphish-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antiphish-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0bfbc3c-5b99-59d6-aa28-94fc879150e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antiriciclaggio-mediobanca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antiriciclaggio-mediobanca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc65df69-c3e7-5a7c-b3ee-912279c7c43c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antixclaimtoken.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antixclaimtoken.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2aca118-16fb-5310-8053-ab6083593ec9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antmineroutlet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antmineroutlet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ee9252-5608-5dd0-badc-32479f5ee486","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antonellarizimthrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antonellarizimthrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a60e780-1a5c-54c2-9b2b-33a9b58911b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antpagoenlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antpagoenlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ceab621-deeb-5c49-9893-3064c136e644","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antroids.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antroids.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89ddbc9e-f8b4-51c2-8281-d7ae0470edfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: antsfun.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antsfun.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ede69f-0384-583f-87ac-d5369a8d9d93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anubex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anubex.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad35b3d-4381-5348-a31f-f14ddc533e64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anubisonsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anubisonsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8333079-f36c-592b-8441-a4db5278f89b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anvtwkw5bx57.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anvtwkw5bx57.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9998e6e-269b-5317-8cc3-58e381d1c7e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anxietyantidoteshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anxietyantidoteshop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d5f82dd-da2e-5587-9f98-2e28938802fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anxietydetachment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anxietydetachment.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--728c45a5-034c-59bc-a119-639cfdeda234","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyfoundationrewards.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyfoundationrewards.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe82b4b-447f-5628-b6ff-14e85767b8c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyinuclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyinuclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1d915c-2f0c-540f-9293-51ad9a365583","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyinuclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyinuclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac77157a-b2de-5e83-a1e8-67cde79b6407","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyone-rewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyone-rewards.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3440a8b6-7fe9-5344-a5ef-cf5041a231fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyonefdn.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonefdn.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d5d4f1-9c62-5d10-8261-dea5ad47e102","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyonefnd-eligible.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonefnd-eligible.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a33cdb-5af9-5789-b275-da3d25ce94a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyonefnd.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonefnd.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8798c3b-3680-5687-b2f5-5b6aadb1066d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anyonerewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anyonerewards.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fac1317-cbd2-5ea9-8e3f-f791e090be68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-chatsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-chatsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--964a491a-d466-588c-a8d8-8aa6b24015e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-chatwithus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-chatwithus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aba2f22-a9df-5169-9d93-fb90eccaa93e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-customerchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-customerchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76109a6-3d50-55ec-b042-901535f47c54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-customerhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-customerhelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6386299-9eb9-5d69-8519-5d793e773e0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-customersupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-customersupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--098532b1-7dfd-5c64-b13c-2463eef99445","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-deskchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-deskchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53bfe56a-ec22-52a1-a5b9-aa44c7f2a487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-desksupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-desksupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f38c98-a288-50d6-bf00-e6b18b34f658","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-getsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-getsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d58165-cf9e-5375-8452-fc318f0b4cf7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-help-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-help-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6afe5f42-7414-5afd-9b60-847fb6db9d3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-helpchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-helpchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12a779a-1628-5653-91cd-1286f88eee7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-helpteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-helpteam.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e2d5c89-253a-54b4-aec8-a6fe649c3925","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-id-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-id-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95504927-54c8-5e50-92d4-7e6a15b68dcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-inet-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-inet-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a232d2a2-029d-54e1-a1a5-80e48ef50439","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-iweb-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-iweb-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6366ecd5-ec2e-5445-b372-6d1b3ec377b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-livechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-livechat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecee7076-3564-582b-9571-2e0e62f50514","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-livechatdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-livechatdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff1ad8a-af0d-5463-821e-c48513968a7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-login-plus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-login-plus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6249b7b0-769e-5721-9e34-055d03bb7731","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-net-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-net-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc10f769-d309-5dff-a3b2-10bb3b838d85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c69e83-731c-5e8e-ac9b-a12b0dfaf3d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-onlineassist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-onlineassist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de64ac3b-690d-5b3a-9e60-0de742e6db99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-onlinehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-onlinehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec9f515-5038-5d37-b54a-61eaba8b020a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-plus-page.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-plus-page.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca6ab0d-1036-5e6a-9367-11d27a4445a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-portal-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-portal-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27301db5-024b-561c-b058-e5b81cd6d49f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-register.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-register.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b6ff97-7821-5ce2-9eca-7d4b98e31777","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-reverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-reverify.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d54d959-e46e-5953-a85c-ae3471a324d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-signin-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-signin-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d55e3ba8-b474-5eb3-a50c-0da615c33bad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-supportcentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-supportcentre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bceb610a-cbc1-5b0e-a0c1-a5aaeabb3b5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-supportchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-supportchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea69a8db-02cc-58d4-bbe2-7246936ca2eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-supportdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-supportdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86a2225-c9ec-552c-8c99-c8349941c5f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-supporthub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-supporthub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d6082a-38c9-5746-8c33-26d4591dbcb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-web-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-web-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f862fbcc-03e4-50ce-8a3e-c6b656df6410","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anz-webchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anz-webchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc756d3b-973e-53a0-9c55-7f841be235a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzassistant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzassistant.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a145ac14-8cb0-5e05-80c9-c02f49caf0e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzausecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzausecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55462411-84dd-5f0a-a9f6-fc124a52ec6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzbankinglivechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzbankinglivechat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fab8b7a-5256-509f-ba8e-2a16ba77b6af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzchatconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzchatconnect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306675c2-23e0-5322-a9ad-a036b6412a1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzchatwithus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzchatwithus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae22e40b-6a1a-5ecb-a92b-4566944ad260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzclientchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzclientchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79b0f2ec-3e0e-5952-a7d1-0ba2cc52e1ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzcustomerhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzcustomerhelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8134b1f-7696-5c1a-8920-f519c08a9519","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzdesksupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzdesksupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ab6879-cac3-5e30-9374-127893e58bf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzdirectbroad.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzdirectbroad.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c02c0b-7487-5048-9f54-19c3d547fbfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzeige-915420.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeige-915420.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50759e32-45de-5bdc-be65-1de036f587aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzeige-details.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzeige-details.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9308f61b-f543-5c6e-854c-596dcad569c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzenpool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzenpool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--235aa6f8-c4c5-5428-aa9a-315ad18b67dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzfraudsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzfraudsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--839d5bb4-5b83-5f0a-b5ef-aae11abba89b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzhelpcentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelpcentre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af3583d1-df23-5120-a7f8-44f736aaae98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzhelpchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelpchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e3d82f-5613-5104-9d9c-c167573732da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzhelpchatteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelpchatteam.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b0071a-5703-5883-9e8c-e2832f5aaa8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzhelpdesksupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelpdesksupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f67aa9ae-761f-5a0e-b996-b7babef78e95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzhelpsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzhelpsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c286b26a-78e4-5935-a950-8c85ed11cc69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzlive-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzlive-help.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--063bb375-75e6-5fec-be2b-47a452c443bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzlivechathelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzlivechathelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89070920-c063-5e22-8640-3c371f110e7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzlivehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzlivehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0539d6c6-3365-5a18-8874-3783fd71de83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anznakinglivechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anznakinglivechat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba0d84e-0ffb-5821-8c61-e67e6c58c9da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzonlinefaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzonlinefaq.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47dd19ee-8def-58da-9df0-35f0687c68cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzonlinereset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzonlinereset.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32233a0-f4e9-57e8-8313-bc0cdefc464e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzonlinesafety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzonlinesafety.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbd9a3c-febb-5422-93bc-cdb0681251bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzonlinesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzonlinesupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aafd2a5-305b-5352-9b88-665977755a4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzprotect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzprotect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75bef1e-524a-5613-816a-abe8174ce876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzprotection.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzprotection.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da746b9d-8e67-5ab9-b04b-48e127946758","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzregister.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzregister.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f9c686-6759-5211-b383-4806b50fffa0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsafeguard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsafeguard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c6ee5e-ee78-5215-a147-7681edf767fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsafety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsafety.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dd3d29-b436-556d-8db7-b8cfd27721a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsafetycentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsafetycentre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb9616a6-af3b-5876-953d-c2dfe49a9dd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsafetyonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsafetyonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c924c1ad-e884-5822-864a-ffa4a8077c34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsecurechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsecurechat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7632dd64-e0df-59a3-950f-bad83a3bc013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsecurehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsecurehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da0fd8c0-bf29-596a-b375-279fde1569b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsecurereset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsecurereset.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de76d72c-3f4f-5b58-ae62-d82bcd369e21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsecuritycentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsecuritycentre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dccf0ff6-90f1-5599-851f-83cfc198c2d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsee.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsee.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e99841-727b-578d-8b93-4bf4443e3494","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzshieldonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzshieldonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6fdb36-4bc1-5277-8298-f872f9ffbbbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzshieldsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzshieldsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--927dd73c-af89-5441-b96c-b9d1e41868da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsignup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsignup.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e14adb-12c2-559b-a00c-6ad8831dea1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsupportchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsupportchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26d80f4-419a-52da-a504-4f82ebac2932","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzsupporthub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzsupporthub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6cd2e1a-472e-5593-b198-fec21c248d58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzvirtualassist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzvirtualassist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f458cc3-3172-5493-bc5d-6a301cb9044a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzwebchatsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwebchatsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9decf8f0-2183-58f4-869a-32f3efb492c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: anzwebsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anzwebsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2f0d51-c06a-5570-8788-f28ebc7b5da9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aolstice.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aolstice.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a1f6756-0da2-5fbd-bc87-f37f469b2dbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aores-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aores-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6448f0-9ee9-5e54-8fba-a3079058c537","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aoripool.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aoripool.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826b2529-5a29-51c3-a9d8-d67b8198fbad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aortp-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aortp-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7f22a6b-c58c-5abd-b93f-6e06cf11c8a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ap-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ap-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8806dc3-56b5-5aba-886e-f8f779b5798d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ap-start.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ap-start.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904feccb-94bd-57cb-93da-46319d5f1144","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ap-wise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ap-wise.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--923165bd-3579-580d-b0c7-5d25e552433f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apac01-dropbox-safelinks-protection-clixsign.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apac01-dropbox-safelinks-protection-clixsign.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce9696d-827d-5c4e-971b-2b254fce4428","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apac01-dropbox-safelinks-protection-documents.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apac01-dropbox-safelinks-protection-documents.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be5dc4c-5596-510b-9ee3-ec1ea6df8c89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apac01-dropbox-safelinks-protection-docx.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apac01-dropbox-safelinks-protection-docx.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff3c541-31f9-59d5-9382-921f6adc2128","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apac01-dropbox-safelinks-protection-privatevault.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apac01-dropbox-safelinks-protection-privatevault.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe6c61c8-25a7-5407-98dd-314f8210ab2d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apac01-icloudpages-safelinks-protection-documents.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apac01-icloudpages-safelinks-protection-documents.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72aafe5-058a-5030-8dec-d150ab4436df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apachedocuments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apachedocuments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3b6c72-724b-5240-a887-3e87a533136b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apartamentairbnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apartamentairbnb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68654365-985e-5bc4-a2d6-ba41b37cdd9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apartamentcomfirmation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apartamentcomfirmation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e59911fa-5956-5ac8-a303-cd95c51dc841","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apartamentguestcomfirmation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apartamentguestcomfirmation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c55c96f6-9101-56fc-9e5e-7f3300c35f73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apartamentjapan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apartamentjapan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e134ce9c-199d-5120-9cf1-d3f434bc3391","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apcommunity.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apcommunity.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cb73c7-0cb1-555e-9c44-f097130a3475","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apdevhost512.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apdevhost512.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5869725-4165-5c97-a9c5-896b6a6b25b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ape-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ape-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acbf1c7e-0188-5943-ae2c-8cb5350b8f69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ape-layerzero.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ape-layerzero.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963585d-089b-5297-bd2a-94c11da1ab3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ape-layerzero.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ape-layerzero.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25287514-fad5-5c4a-a89a-0d5287e35053","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ape-x.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ape-x.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81411b7d-1c96-5241-9bee-9d54babcf135","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apeccoinclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apeccoinclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b1a0ed-a270-597a-8bd4-813cdcf8ca2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apeclaime.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apeclaime.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f1ca64f-cc27-5e71-aeda-4263b4b45eca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apeclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apeclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b096a3b2-084f-5e69-be80-b02e797a83ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apecoinclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apecoinclaims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c62f6b-7980-5de0-b7d3-9a5806f460ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apecoinrewardsclaim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apecoinrewardsclaim.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c368864b-9518-5d72-9426-a321d052f07c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apectnetcore.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apectnetcore.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dcf2ab0-49dd-5559-9cb8-8197006dd03e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apedrop-distro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apedrop-distro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae5d82e-b8f2-5b64-8a1f-5ccc136d95fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apedsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apedsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f086fb-f66b-5632-8641-cd19df841a3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apello-gate.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apello-gate.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827243c7-29f7-5f75-9bba-d23e2b8b725d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apello-web3.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apello-web3.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f3ea2ef-625c-51c4-84a6-208e728250e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apelloauth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apelloauth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6901e6a-3af7-5c82-8adf-4dcfb7a92ced","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellodiscord.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellodiscord.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33409f56-902f-5fec-b231-b98eea13cee3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellodiscord.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellodiscord.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f266f0-7bea-5d45-ac74-dcdfe5ddc622","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellogate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellogate.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b279b720-31ed-5d3f-bd85-f6e049beca39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellogate.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellogate.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b217fd99-ba0b-51de-aa72-e9c8bf7ba0df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellogate.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellogate.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b4129b-9ba1-5655-8324-8f60b916c013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellosecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellosecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38642f18-9f26-5e78-8915-0c911414a8a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apellov3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apellov3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f3f8b3-5a06-5bd1-b194-22db6fadb975","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apelloweb3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apelloweb3.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f70e33e-f330-50cd-bd02-4fd630c967b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apelloweb3.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apelloweb3.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f556f5cb-ccaa-595f-90dd-52f0703d9110","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apelloweb3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apelloweb3.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae88131-0bde-5b11-a87e-c2fb9f7783c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apemars.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apemars.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a371355-ef14-5ff8-8a1c-ff657a2baa02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apepeclaims.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apepeclaims.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366fa28f-835c-59dd-8c94-e967da671963","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apesirises.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apesirises.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4069be4d-0c4d-54f6-9ec0-cf59b2fe83a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apetokenclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apetokenclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ef20a2-9942-5019-a12b-623700e64058","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apex-capital.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apex-capital.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec09365e-fa4a-52de-98a9-87859aadb811","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apex-exchcnge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apex-exchcnge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a500753-4bc3-5bdb-8b24-533b02172cbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apexapay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apexapay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8d0d459-56e9-5384-8237-a1f35d8d829c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apexcap.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apexcap.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1682ef05-5a02-5136-af3c-5cf8a8b5477e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apexcapital2u.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apexcapital2u.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711be448-10bc-5af8-a69f-1f99493f5f06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apexrewards.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apexrewards.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d42a36bb-e741-5cbc-860a-47f99927102f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apextradecapital.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apextradecapital.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea283937-5b45-557e-9987-0cee0ab7e0fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apexurbanmotors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apexurbanmotors.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec5d5c7-55be-5d2d-aaf6-d3dfd22c3170","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aphgaixmarseille.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aphgaixmarseille.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca8b90f-f3b1-559e-974f-e29624ab0315","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aphrodite-casinosfr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aphrodite-casinosfr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f68fe7b-4bc8-5a73-88be-69b5e7be83a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aphroditecasinoonline.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aphroditecasinoonline.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--484d1e7d-e635-5811-b946-941e2628f6b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-altdentify.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-altdentify.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4eb779-f1f7-5c4f-9378-5bc5ebec8986","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-click-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-click-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--299f8b1c-b974-5436-b540-b122d354f6e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-cloudflare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-cloudflare.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d402b3-afc4-5ba2-8917-46e66c739e3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-crome-ad-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-crome-ad-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2ba5c69-7f48-5566-a7a8-1a199780c20e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-exodus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-exodus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93c6e73-cc62-54c4-b399-d7328b7915d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-facebook.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-facebook.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3471e842-0baa-5514-832a-95eda4b8c39c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928d772e-671a-5d5e-9464-fef196c5ca39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-guildy.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-guildy.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d4bb32-499b-51b3-bbb8-0d067fca8c6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-microservice-us1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-microservice-us1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d30396e-ad09-5c0b-80be-9b702536175b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-opensea.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-opensea.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9cde4d9-f406-5a97-8b70-1961c18bef59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-opensea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-opensea.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--766f4f1c-d756-5ae4-be51-1fa9acd75004","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-ryd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-ryd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d88b0d2-8245-525b-8137-8e4d657933a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-tangem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-tangem.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--587c85ba-c3cb-5ec8-a9bc-8dd5d0b134cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-tronscan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-tronscan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca3f8be-e7e9-59f7-a359-d0c037d5b6f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api-walletconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-walletconnect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d360d1-d675-51fc-abb2-e102730afcb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: api26-vulcan.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api26-vulcan.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0b1b93-cdb8-5065-a57b-a12d5fcb8af4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apice-cifrova.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apice-cifrova.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791ada0a-a2df-593f-aba1-54d5af6f0d17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apicheckledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apicheckledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a008d7b9-8bda-5c07-b9fa-a5e7b4b962a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apiclouds.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apiclouds.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea97dbd6-f92f-50fe-963a-a3e36e0493d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apicollab.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apicollab.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f929d05-c007-5015-a519-a132c9e435ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apiledgercheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apiledgercheck.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df16a456-4279-50fc-baf0-bc105d1330d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apiledgerscan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apiledgerscan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87aa8bac-eba9-5ec4-b8b6-f5aedd812a36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apis-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apis-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--903f2864-9c11-5cee-b35b-79212a539080","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apis-collab.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apis-collab.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0af3f20-abe8-50da-8178-d0ca471f91f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apis-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apis-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460eb76-a512-5b39-8b5b-19ab4c290b29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apis-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apis-microsoft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6007507-b272-5cad-97a6-749f7579e92c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apisledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apisledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897e8461-2396-5976-b59c-13f6f6552e4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apisusps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apisusps.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8087428-ff21-59a3-b842-35ed77738473","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apisystem.name","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apisystem.name']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd7177b-ae91-5790-b83f-d6c7b45de1cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apl-management.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apl-management.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fe09fb-d82d-552c-b25c-60f4f41d2284","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aplar2019.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aplar2019.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf545454-ccf6-55d9-8463-8d30bff8d711","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apnqlugebfdkbzgdczatvawmxdnohpzckntm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apnqlugebfdkbzgdczatvawmxdnohpzckntm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90cb3a0e-0778-53c4-a056-c4a7b09721ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apo-tansuite.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apo-tansuite.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac1520f-4586-555d-9c5f-aef954748dd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apogeedexlink-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apogeedexlink-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0f9f10a-fd1f-584b-95c3-99433af32c4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioautenticosantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioautenticosantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7659f4-8b03-5e60-aa67-a0e76328e009","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioclientesantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioclientesantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--534c0618-522b-597f-bd8c-a32adfce1621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioclientesantander24h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioclientesantander24h.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--798cd12a-4797-5915-a010-93e40f1e0eeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioclientesantanderdigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioclientesantanderdigital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc1e1e4-f4d6-5e01-85a8-3dfaac19ba5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioclientesantanderimediato.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioclientesantanderimediato.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00482e48-7ae4-5440-b559-a9b01214ff0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoioclientesantandernet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoioclientesantandernet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1331afcf-7380-5477-ad77-15aa7f4ea15c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoiosantanderassistencia24h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoiosantanderassistencia24h.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3658aa94-a883-5847-8333-148812de4893","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoiosantanderdigitaltotta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoiosantanderdigitaltotta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5e5fbf-96d3-59f0-ad61-875e09f69507","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoiosantandersolucoespt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoiosantandersolucoespt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f621d0c1-fd1a-538b-8801-3a16cba0b014","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoiosantanderverificarnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoiosantanderverificarnet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--020096c5-6f87-54af-b7e2-328569152502","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apollo10-asgo2026.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apollo10-asgo2026.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba46c13-8a53-5fe6-ae44-8bcd638ed694","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apollohdtv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apollohdtv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a49cbc53-e2a0-5ab7-b196-093fe1745f69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apollonext.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apollonext.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cb26de-4772-5a19-a6e3-e08cad481475","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aportesaenlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aportesaenlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a4a7109-dfec-50d7-82b1-94f2010cc778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aporteseaenlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aporteseaenlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69512e8-ad97-5c87-baca-1b9e30d529ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aportesenlineapago.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aportesenlineapago.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae5a26f-3293-52f6-a5db-531b442b3e98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aportesenlineas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aportesenlineas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e053b21-c945-5ce6-9c20-6c61d4b4bfad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apostaganhabet-brasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apostaganhabet-brasil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd9214ff-08ad-5baf-b4e7-583787a58510","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apostil-russia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apostil-russia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a92a9bb-4260-5edb-a63f-79d12fbbd347","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotansuite.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotansuite.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ebafae-2f28-514a-b96d-bbf28b3da6d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotekapplet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotekapplet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16ada00-6ef4-5b6e-bbac-44ce1eac8b16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotekisverige.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotekisverige.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5e29d7-8f9a-5bba-9143-c504648a91b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotekpiller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotekpiller.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d40e52b-7e4f-5ae0-a40e-62133cc9e3c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotheekatlas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotheekatlas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe6517f-9fcc-5167-9b45-4fd81da79d8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotheke-billiger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotheke-billiger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86684bf-81f3-552f-a666-cec9cc61bfcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apotheke24.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apotheke24.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1d86f4-e53f-5a2e-a5e3-041fdf0c0682","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoxarlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoxarlabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdef944-22d9-515e-a2f7-93b32f13e127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apoyvex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apoyvex.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a217980-59e7-5142-a0b1-f62c1eae08ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-1inch.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-1inch.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2544e9-1340-577f-ada6-53ea1bd178bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-1inch.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-1inch.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71d1508e-dbd6-5bd9-b4dc-6be61fa5700c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-2v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-2v.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cca53b3-83e9-5ceb-bd98-438d5c05db89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-2v.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-2v.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f84c20c-141a-5837-a763-abd1c351bbee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aace.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43e9cb33-e2f7-5601-a25c-80f2af113654","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aave-l1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aave-l1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b0c7f42-6c2c-5c52-97af-5d4e8f3d7a59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aave-v1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aave-v1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fbe647a-2495-5001-8642-b8a15669cce3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aave-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aave-v4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b300331b-54f1-579f-a6fa-bc67bdc39f3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aave.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aave.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafb4a16-113b-52a4-8fe8-30017dce2a9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aave.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aave.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4410c0c7-07d4-53a5-8c0f-786784cffd93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-acceso-inicioweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-acceso-inicioweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--272f42da-1b6d-5c1a-9571-677ec4623705","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-acceso-loginweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-acceso-loginweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aaace6b-58b8-56de-8163-fc8d471bdf78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-acceso-usuarios.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-acceso-usuarios.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b9395f-f602-5931-9421-7f280635b024","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-accesoclientesweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-accesoclientesweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817fd311-abf2-5636-9145-7f4ec7a4b4b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-accesosweb-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-accesosweb-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae091fc-6f14-56dc-92eb-836c0a2a18b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aerodrome-v2-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aerodrome-v2-finance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cfaaefa-3d18-554e-bbbf-8b45da9a29a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-allyouneedsonline.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-allyouneedsonline.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea28cb7-6614-5912-9f21-87654bb091b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-alpha.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-alpha.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e966b43d-ebf1-5292-a28d-2b4768bd5b6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-aptoslabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-aptoslabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ec2938c-478d-5efe-9c9b-17dfb256cf4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-apyx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-apyx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34237794-a759-5811-85b2-67d188c3e862","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-apyx.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-apyx.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0820a601-c129-50b3-84ff-ae5b53dbb8d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ascendupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ascendupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b20c2bb-d1c5-54ab-b8e7-91dfd0f75929","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-auviewsevergovinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-auviewsevergovinfo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66986421-eac4-5648-8915-48565d55848d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basechaintge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basechaintge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57746cda-144f-58db-abcd-a4bdaf8c1af6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-based.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-based.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd470b17-9b14-5732-8fd4-fabcfac07cc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basedone.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basedone.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e8fbe9-7928-5bd2-a6b4-52c0b5603ad3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basedonex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basedonex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17ae55f-10d3-5cdc-b8a8-76ca04b4b9ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basenetworktge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basenetworktge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6bd300a-8f40-5980-ab53-13e08c47d485","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basenetworktge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basenetworktge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--312ecee9-324c-5d13-98e2-ff6af68b1606","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basenetworktge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basenetworktge.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3e7a51-c1f7-5ef6-b2f9-3cc8ab5bb48d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basetge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basetge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d81296-469a-5da6-9573-3b498a7c3d14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-basetge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-basetge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75849db2-8a21-5874-a014-12bf7f8d3878","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-beefyfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-beefyfi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eed1942-e619-5f5c-b260-7213acbcf966","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-berachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-berachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ff7a52-f7d6-5ea4-a0bd-1f287cbf59f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-betcio2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-betcio2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60bc5c9d-a56e-58d0-ac9e-6f4434ae346a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-bin-go-0x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-bin-go-0x.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f61749-ce8c-5aad-ae83-f80f9c9efb94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-binance-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-binance-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--827ee3cd-bc5e-5483-b320-ac4011af55df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-binance-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-binance-web3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c578affd-10f8-5993-b9e5-03ae0823eb90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-biofoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-biofoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7322b691-b302-59df-bc9f-e806e0c26d41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-bitbuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-bitbuy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0475b82-1f68-5691-87eb-d434487f446c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-blackbullsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-blackbullsol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2343e441-382d-55bc-b6aa-af0d255ce35f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-blazefoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-blazefoundation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f07142-a129-56b5-a284-ba31ecd09690","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-blosk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-blosk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f62d67d-985a-5225-8f7c-5f216af8b45f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-boosteth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-boosteth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25d30bf9-0990-58bc-9531-ce652e8b96ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-boros-pendle.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-boros-pendle.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f4ebbdd-5f8d-5177-b596-abc67222c010","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-buildonhybrid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-buildonhybrid.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ae37631-142a-5c71-89c1-786e616ccd96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-changelly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-changelly.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0066ecc3-73fc-5f20-a9d1-59a5900db951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-checkbook.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-checkbook.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e723b7db-fdde-587f-91e1-bbf5d64d7d90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-claim-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-claim-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--677ae661-868e-5bbf-8348-e7cbaef80af7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-clientes-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-clientes-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e763fcfb-476e-5926-b602-ac5cd1610917","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-clientes-onlineapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-clientes-onlineapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f65a21a1-381c-5fc7-b3d7-bff04cd750b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-clientes-particular.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-clientes-particular.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404339c-1c3e-5b92-8e16-7e4230100310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-coinbase-helpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-coinbase-helpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c52fb75-2136-59d1-a341-4906c6568a75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-connect-uniswap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-connect-uniswap.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d31e4e6-9399-5e18-bfc2-67f86ebbc4d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-consultas-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-consultas-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1575b24-62d9-5092-ba8f-71668659fc11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-convexfinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-convexfinance.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e5e58f-3dcc-5ddb-a05b-26f9a59cbb56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-cow.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-cow.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e418a1b-0fcd-5dab-a6a6-af89f80a4d0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-crv-curve-swap-curveswap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-crv-curve-swap-curveswap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b43244-86f5-5961-91f3-c21c8d520c45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-crv-v3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-crv-v3.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24f6209-e2c9-5ea4-85b3-64622eb7a5dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-crv.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-crv.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece95d83-8e08-5b36-857a-625d3b1bbaf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-curvewsap.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-curvewsap.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b8064f-a7ce-5345-88f6-02370a26b854","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-cyclo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-cyclo.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94604a78-77f5-53c5-a4a2-cec20eea666c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-dappradar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-dappradar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ae1e79-6e90-5d4a-8a99-9efed432d594","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-datos-clientes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-datos-clientes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77206bf1-ac5f-58b1-98c3-865ea6c2477a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-dctpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-dctpay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--606d600d-fbd7-5800-97ac-697d14018250","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-debridge-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-debridge-v4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944b668f-a5d1-5b9c-8bd8-791200b6c7e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-defllama.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-defllama.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f23a30b-fefd-5303-aaeb-2e4f4cfd331c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-dexsprt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-dexsprt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb387cf-943a-53f8-86d3-6049f35b00ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-doppler.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-doppler.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0fce65-f561-5412-a68f-f656eb4c0a7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-doppler.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-doppler.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf1009e-02c6-5322-a527-f0caa372066b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-download-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-download-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1757dc93-2185-50b2-af6d-2db711dff1e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-drake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-drake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c186c5-0065-54f2-94c4-183fde636e36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-drop.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-drop.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec7e351-a33b-59e0-84f4-961d2a257c1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-dydx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-dydx.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0baa3ca-00b2-524f-ad26-9e5debc0a98d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-dydx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-dydx.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcfaac3-9507-588d-8b87-755a85d50cf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ecoinbaseservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ecoinbaseservices.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65302d6-1f75-5702-9f54-199a5ad19d78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-eigenlayer-v1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-eigenlayer-v1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb424b7-624d-53f2-91af-87a7206dd25d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-embercurve.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-embercurve.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5351e229-7612-505d-b220-67dbe7400f40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-embercurves.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-embercurves.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4aadccb-96ca-5ec2-8f70-9742df40fada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-enbetmobil1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-enbetmobil1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41470f52-7955-5703-b84a-fe6a13b4d6d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-etc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-etc.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2be2cb6-7160-5cea-b524-e77b688440e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ethena-dashboard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ethena-dashboard.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d549e52-5125-5dd6-8000-8dcb2995e8ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ethenafi-b2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ethenafi-b2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5f30d0-a788-5be0-8bfa-221ae6fdc195","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ethenafi.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ethenafi.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306290b9-f2b8-532f-b824-2172ae26d03f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-etherfi.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-etherfi.cloud']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e941903a-5338-56f9-b083-fcdde6934ed5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-etherfi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-etherfi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fa6ea6-2c27-5beb-acab-8be46a5960e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-etherfi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-etherfi.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1a7474-731c-5ea6-a9a9-66b4b78ff636","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ethgasfoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ethgasfoundation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca21d5b9-7636-5b2c-bf6b-50b53c6c02b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-evaa.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-evaa.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d71d176-e6e3-5cff-9c64-158bbb14594d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-exodus-vs1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-exodus-vs1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6179ced0-3561-5f55-bb34-bc3e52c58d8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-exodus-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-exodus-web3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3923e5a3-0830-5e84-b1e3-8a4a0592e337","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-exodus.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-exodus.store']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17470a5e-0926-592c-a5a5-e538c263d5b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-fairdrop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-fairdrop.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d61ec16-d4e0-596d-9002-47377df1cec1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-firelight.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-firelight.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f93dae-10b2-5cf0-a790-a3fe7a670476","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-firelight.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-firelight.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ac4449-6ef6-5eb0-84f7-b4120d398b36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-firelight.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-firelight.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18dfe4fa-fe54-5240-b0cc-ed327d26fe14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-firelight.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-firelight.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e825c8-4bfb-55a5-9784-7b705f258a5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flare.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flare.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--886d2a6c-0e1e-515f-859c-ab94bc3998a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flarefndn.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flarefndn.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc4fe96e-04ce-58e1-bc67-6653228b70ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flarefoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flarefoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a52b1010-a426-5893-9279-b30df77a7c28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flarefoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flarefoundation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8dbd5b-e9f5-5be8-8883-7ddecc288f66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flarefoundations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flarefoundations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa137aa-a95d-5254-95e6-de1f0900ee88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flaregovernance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flaregovernance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b44f2788-531b-5aa7-84a5-7e2e26695187","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flaregovernance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flaregovernance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4c8920-7d78-5ac9-a1bd-34fc306fa88d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-flaregovernances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-flaregovernances.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca39cfe-9daf-50e7-8484-47024684eb58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-fluid.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-fluid.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f56b69d-b76e-5304-b24b-b4b5d992b1a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gemini.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96b4e5c-3d81-5d31-b98d-75eed7ce056e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gemweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gemweb3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb0c6e8-a896-5805-8771-c87e5e5ef671","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gestion-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gestion-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fd268fd-e9d8-5b5e-b906-ba1b9ba41bc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gestion-loginweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gestion-loginweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303e6274-3735-59f8-9602-cb542e748005","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gestion-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gestion-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365645df-e636-592f-801c-3a2b3add1ba7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gestiones-accesos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gestiones-accesos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e8e1fd-aa4a-550b-95bd-c1e9aaebeea6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-glaze.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-glaze.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a81e75-9194-5ee0-a73a-fdd6055c2691","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eabae90-133b-5b10-a697-0bb58a88f686","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gobob.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gobob.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c95bcc0-63b5-59f3-b447-548b42fc81af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-goodvibesclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-goodvibesclub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975c7fc2-8bfd-59bc-8100-9822817330cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-gosolo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-gosolo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7e99e3-8d42-5f16-ae63-47fb3fe8a5ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-grassfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-grassfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ffe607-7b39-5265-98ff-4386bf680e4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-grvt.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-grvt.cloud']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8cb07f-3c31-57aa-9260-04a9d3fb7d07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-grvt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-grvt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41bcd7fd-36cc-5a2c-9e10-2faceda8ac7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-grvt.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-grvt.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--316ad0a8-bf4a-5731-b675-a71b99302dbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hellobons.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hellobons.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7b83aa-2fea-5121-b858-173c6d9066b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hotstuff.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hotstuff.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e70b428-4834-584a-af53-579f177f8d74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyena.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyena.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09dee3a0-6ddb-5858-a7e5-b1225eab7ade","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hylo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hylo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0304ee-207a-50c5-b002-6db6ffb85279","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyper-liquid.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyper-liquid.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55c3e65-d6ca-5378-8d55-737a1ed10cb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyper-liquid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyper-liquid.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3312e3f1-97a2-58ed-a14d-14cfb5899e8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyper-liquid.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyper-liquid.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d817ca8-ebaf-5684-b9ad-18fb55cf7a99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyper-liquid.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyper-liquid.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b68828-51e7-5a3c-8680-f1285078b2a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyper-liquid.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyper-liquid.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097f6402-91c7-5649-acb8-472fe7557b5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquib.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquib.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2564ba40-c54e-5458-9181-6a66bf1131c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid-s4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid-s4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc2afd7-612d-50cc-9800-c01c74d9a180","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid-s5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid-s5.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c0ea30-6e7e-5ce4-b686-f5934b55bfbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid-trade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid-trade.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e854c64d-1a4e-54e8-90e3-4a704317c263","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid-xyz.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid-xyz.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ce2bf59-66cf-5244-95ee-3548b5078dae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8c7e9a3-c8e2-5064-8315-ff1ff328ec82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d252015a-651d-5a52-a227-2e2a8ce90bd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3906d914-e540-5ff2-9f1d-fc272b5ab731","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquid8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquid8.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27253b3d-d038-5780-8b6d-82b2860320cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperliquidi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperliquidi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3328c75-9487-5caa-9fe9-2d2d208cbd6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyperwavefi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyperwavefi.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92aa9b07-d3bb-5b1b-b32e-74ce5253dc37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyprcrswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyprcrswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554f005e-0bc7-56d2-bcad-333d714a4de2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-hyprrswap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-hyprrswap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb74e20c-2106-5b3a-8de3-c620a3420b4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-id23.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-id23.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469259fb-ed78-53d3-b5be-559091e20e52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-id45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-id45.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae026fc-1c22-5032-b910-ca4787bace26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-imajbet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-imajbet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29757e6c-8654-5af0-8c44-33fcad098046","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-inicio-loginweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-inicio-loginweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ba3b78-cfd2-5175-aa3f-ba84a2e3e670","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-install-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-install-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111d9e59-54bb-517e-b6ae-e4792593cf19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-installer-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-installer-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fb2c22-8b9c-530d-8331-044c7b93e40a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-interface-aave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-interface-aave.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--711bcfcf-5baa-55bf-9443-5354ccb91b7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-interface-hyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-interface-hyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e54b7f7b-c28f-5b9b-bc0e-9baf662e1e7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-interface-pancakeswap.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-interface-pancakeswap.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--392d776d-cb2b-5e3e-a3ac-273b564b114a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-islands.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-islands.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b547a0-239f-509b-bf43-191a749cd1af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-islands.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-islands.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3caf78-6ff6-57b6-bfa8-7863e732bbe6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-jito.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-jito.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c262c2-8548-5267-ab15-db5e51c7e209","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-jojobet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-jojobet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89f246e-f579-5beb-9add-1bdfcbff1b46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-jpmorgan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-jpmorgan.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8403a581-5636-5d89-85a8-2d570b64e672","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-jtx.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-jtx.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ad4131-6647-50cd-9145-d56713bdd2a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-jupiter-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-jupiter-swap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b757d7c-4766-5994-aeec-3625afeec9ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-kavbet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-kavbet.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06daa8ae-fd54-59ab-9d02-112e533b232c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-kintara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-kintara.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8660f019-bf80-5981-9a9d-0c6ea421192b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-kintara.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-kintara.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27233c76-155a-5991-ad88-91a905c3993f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-kinzafinance-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-kinzafinance-v2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b952d239-b319-5c49-8e10-8bfe8045acc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-knab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-knab.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c3c787-93bf-5cf5-842a-830db4ba2481","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-kyros.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-kyros.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da0620d-fd3b-5583-a922-4a4ca1b79c76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-launchpad.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-launchpad.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--defd9c3a-a461-56be-a2dd-a17a56569f03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-layerzero.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-layerzero.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edb0c66-4fad-5a69-879e-72fa7351b272","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgar-com.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgar-com.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3734d62-8cf3-5d96-b8a6-d139b69400db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgar-com.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgar-com.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f36ea90f-af69-5254-a5af-5355ef5215e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgar.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgar.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b52e8d8a-8eb3-5771-916a-ba233fc1fe3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgar.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgar.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf45f0f-4d00-561e-abb8-fa990c9fde35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledger-co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledger-co.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4783ec-4ac9-586f-bb92-9bf6d4ceac21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledger-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledger-live.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b090ec31-f0e1-58a2-af97-44b58a742dea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledger-security.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledger-security.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e14fe8-8e5a-54ca-ad98-0f1340fd86c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledger-static-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledger-static-v2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72a54259-b904-571b-b883-4bd34a1bdc86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledger.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledger.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33ad8ad7-f4d0-53b0-824f-8f600ca1583f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgerwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgerwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d39e8ca0-ba4a-53ad-9b40-b5bfe6424b02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgor.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgor.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c676bc-487d-5682-bbf5-aadfde7caff7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledgr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledgr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca1bb9f-0840-5c4b-8365-0b5bd8af2269","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledqer-com.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledqer-com.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736dce03-5df1-524e-b141-bedb1890a256","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ledqer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ledqer.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c2e8b7d-cdef-590f-8dfe-efee2c6c524f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-legal-ledger.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-legal-ledger.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--075b34d1-2a8d-59b4-a0b8-9547eadae648","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-legder.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-legder.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0029a0fa-1d78-57ea-b102-6e780184d0d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lido-fi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lido-fi.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--070e9575-d4cd-5fe3-abb8-5cd38648ed79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lido-stake.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lido-stake.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4c5711e-a656-5ebe-9c1e-85ce1ce1c6d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lido.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lido.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb9258b-912b-5a39-95f2-7e3bf7ac5e5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lido.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lido.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e1669f-b13a-5273-9ff4-920ebefdb24e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lidofinance.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lidofinance.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a402f507-1837-55cd-b7bb-3f48bc826e81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lidofinance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lidofinance.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d948064-5dae-51ef-8522-c621655824bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lidonetwork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lidonetwork.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0659b25e-7ec3-5242-b19c-c2b06fbf000e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lidonetwork.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lidonetwork.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c845b44-ec38-5f50-a0d1-13f0098ee92b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lidoprize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lidoprize.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d4f9d6-5716-594c-ba78-569715ed3f4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lighter.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lighter.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf7470c-1607-5f38-b346-149db12f44aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-login-accesoweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-login-accesoweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--050420dd-6a58-53ac-94b2-2f8ded5e59dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lunabet-2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lunabet-2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee7692e3-e1ea-5c4f-ae90-8cf70269cc1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lunabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lunabet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0617287d-7bdf-5679-9fa7-dcd25c165e45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-lunabettr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-lunabettr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57ea0cad-8eae-5f94-8020-7c8b6f950815","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-magiceden.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-magiceden.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64141775-4da9-5ad4-ba14-2422cb2a34b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-magna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-magna.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf689e1-b111-5425-994b-671f225e8e13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mainstreet.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mainstreet.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c3b955a-6c75-5f9f-95ac-9ac8619b8f06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-manyushiba.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-manyushiba.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077f10e0-f3ce-59d3-bccb-3f44ff24e8ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mavibet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mavibet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7856f31-5382-5ee7-a03a-bb16122add80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-merkl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-merkl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e080b27-65f2-54b7-9ca7-76ade77e3f88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-migratefun.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-migratefun.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31d9053-2156-5c46-85a7-5a0646d94424","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-migratesfun.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-migratesfun.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4410423-5919-58b6-8c99-0860de6061d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mint.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mint.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e20b46-e205-5402-b7d7-24adb5d0dde1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mint.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mint.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d3a0448-c8b8-527e-b8fc-c64973f5da9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mislibe.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mislibe.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47de8b1-c967-5740-9445-3930ccb48936","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mislibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mislibet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9500641c-bdb8-559a-8ffc-1aa7af788730","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mislibet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mislibet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc0372d-0cd0-53d6-a043-b5dbb9cc704e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-monad-mainnet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-monad-mainnet.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04aebae3-c123-525f-b553-80dde288d3fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-monad.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-monad.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66290830-5da9-59d2-8db8-47c32d9a10d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-monaddashboard.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-monaddashboard.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16200c65-a873-5312-869f-36f75ac93f00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-moonshot.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-moonshot.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f8fb0ac-a333-574e-8ffc-4193b292f9b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxbmerchent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxbmerchent.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a392168-4a03-51a7-97d4-de0a8e7770d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxmarchant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxmarchant.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e64403b-c14e-5168-b66e-c89e0d9dd4d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxmarchent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxmarchent.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2cb76b-ea48-529b-b8a4-311ea8536d6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxmarchont.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxmarchont.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21cd7778-e3ba-5abf-af7d-db7e304521fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxmejchent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxmejchent.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a752eb2-73c0-5842-a43f-f59d3b541b01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-mxmejchont.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-mxmejchont.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c378e3f-c6ce-5c69-a146-9f67b2b8c047","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-myauspost-reschedule.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-myauspost-reschedule.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c65c88-4b29-57de-a9e8-b6dc05a6aee9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-myidgovcaptcha.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-myidgovcaptcha.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d02fc92-1ec6-51da-ba00-0e8eb52fd76c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-myviewgovinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-myviewgovinfo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27415c48-950a-5920-b72f-e866c4156a9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-nakitbahis.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-nakitbahis.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e6e70e-9175-58cf-8bce-7fbc46d912cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-nanoeth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-nanoeth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5486d66e-6efb-55b0-9be5-53d35ee4c2e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-netrun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-netrun.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6c5a6d-c592-59ab-9a89-0e9ff7f73bd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-nirobahisgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-nirobahisgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5faf37-249c-519b-b1fb-e83ddfd72425","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-nitrobahisgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-nitrobahisgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea3ca778-5716-569c-95c9-cdf9d44facb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-noya.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-noya.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd7ea2a7-1d4c-50ec-b714-e88e261571ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-odos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-odos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4a4394-ade2-516c-8945-8b4cd1f19d84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ondo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ondo.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94cc74d9-c73b-5ca6-af28-a1ecf6df3522","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ondofinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ondofinance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f81a223-c464-5073-a9e4-4505e56b63f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-openledger.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-openledger.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d78bd8-4f3b-508a-ba69-dda6b2ff07d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-opesea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-opesea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--054a09e3-443e-5116-b727-752352a31931","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-osmois.zone","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-osmois.zone']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b717ec-7bb0-5bef-b0be-6c77b631dfa7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pancakeswap.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pancakeswap.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--934d20c4-7f33-52de-83c9-aed895e3c0ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-papertrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-papertrade.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1543550e-5ed5-54ae-9083-e09cffeae92a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pendle-launch-v1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pendle-launch-v1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a112d7b-c059-512d-a8b2-fd5665247567","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87134cde-988f-5706-9eb8-a2db924ce6f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pendle.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pendle.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dfab7c6-6f0e-5a5d-87de-9e32ff02d92c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pepe-unchained.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pepe-unchained.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e457773-b2aa-5a86-a584-dea25eb86285","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-phantomm.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-phantomm.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4d6e28-9065-581a-bd14-657406447aa0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-piabellacasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-piabellacasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5f8379-52dc-53de-bfc5-03ba90596811","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-piabellacasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-piabellacasino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f7d347a-a7d6-5cb7-9434-4ab3e8da796a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-piabellacasino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-piabellacasino.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1fa5eb-0e10-5d0a-8062-664a01fac5cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-piabellacasinoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-piabellacasinoo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6edf069-cf79-5668-b28b-a5ad8fd1aff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pieo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pieo.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4638ac5-f7f0-551b-b974-653849720da9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pleous.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pleous.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46765fa8-d370-5966-a398-80cc9060cc31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ponsfamily.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ponsfamily.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb9ef5b-9d29-5913-ac96-615d2b49c31d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-poocoln-v3.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-poocoln-v3.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767dbed8-ada7-5863-8482-c258bef2c0ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-poolstaked.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-poolstaked.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7a7a12-7b14-5f26-b3c9-c7b5fe5792dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-portal-loginweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-portal-loginweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c730150-a5d1-57b4-a4e7-8486feaca310","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-portalbridges.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-portalbridges.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf8085d-6e06-56ed-90aa-7329d6814d90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-portalweb-soporte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-portalweb-soporte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be9f9da-28c0-5413-9b7d-34a5bf43a559","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-postbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-postbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7cacf41-6563-5da6-96c0-214a8399d3f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-propr.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-propr.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e646ab-78ec-5b03-a8ed-28ec6685861e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-pub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-pub.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13bc2731-690d-574d-a3a0-2f7fe3a982e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-puffer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-puffer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b987c2a2-11e3-5a96-acb8-80cd2c76f443","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-quant.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-quant.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666a52b7-bf92-52ac-a12c-b64ed4bf4a70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-rabby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-rabby.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a88ff4-7efa-5488-bb92-06dc7a9a4adf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-raddar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-raddar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e90a411f-5cfd-550a-8eae-1835516587cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-raydiurn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-raydiurn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cedb515-504a-5b3a-bba9-a286a2ce3b8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-reppo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-reppo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2ceb221-71d8-578a-a23d-6f92fe0b6aa7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-revoke.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-revoke.cash']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18bf8833-6c20-5f40-bb17-05d1d6490f27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-revoke.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-revoke.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09632dd2-4cdd-5413-87fa-45061cab9be2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-rho-co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-rho-co.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22fe380c-a9c1-563a-ad67-230a3e13eb4c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-rnetarnask-wallet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-rnetarnask-wallet.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab3fffed-b3cb-58ce-9225-b6102a8b9088","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-robln-hood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-robln-hood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e2d8969-2e45-50e1-b0b8-8375fb9d892b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-safepal.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-safepal.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13cf430-e463-51e0-ada6-e4b05c224361","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sahara.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sahara.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3502e0-9f79-5c84-a529-1d98cb96fe85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-secondfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-secondfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6c057d4-75bf-542f-abca-c3fd2fb87728","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-seeker.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-seeker.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b4f2fb4-18f1-5c0f-be56-b98c316c4400","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sentient.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sentient.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056af90e-0257-5ad8-9209-038b02366adf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-servicio-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-servicio-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--260f8dc2-725b-5d96-a26b-dccf59ca3b37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-servicios-accesoweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-servicios-accesoweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--accaa4fb-3726-5df0-a2dd-039496df4926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-servicios-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-servicios-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c75800-8163-535d-bcd3-be85171a3e2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shartbandi-blackjack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shartbandi-blackjack.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3718922-b254-5b44-acd0-634a0767e03f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shartbandi-poker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shartbandi-poker.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8d94fe8-78b5-5e66-abc1-9c79ec57cf03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shartbandi-roulette.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shartbandi-roulette.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06554b89-c07c-57c5-9c7a-1e079343127b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shiba.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shiba.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0508ae5f-c1b5-5d16-83a9-c35eefccf682","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shiba.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shiba.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de424a63-29f0-52af-9848-09452b08a120","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shibatoken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shibatoken.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704923b3-3ca3-5fd4-9c20-113f9b74c979","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shibatoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shibatoken.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--271e5cdf-32f4-5d32-a0cb-7cedd7b67d1d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-shibatokens.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-shibatokens.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e480d857-3574-573c-a6f3-fa0c8e4e9827","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-skatteverket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-skatteverket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb63b558-ecad-5d54-96f4-193cacb0424a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-slotsvader-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-slotsvader-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb45a47-6709-5e42-98bc-061d9da414d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-solara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-solara.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b3fe0e7-a254-5703-9065-3eedf0f87962","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sonneflnance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sonneflnance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4768626-1308-5d4f-9e73-c1a41af4172d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-soporte-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-soporte-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d7b782-56f8-5e3d-8b34-28da7912738e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-soporte-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-soporte-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d84eb64-c778-5d79-b6db-98d0da39e2a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-soporteavisos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-soporteavisos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4972c71-d67e-50f9-948a-3764f1b66b20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sovryn.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sovryn.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--107da437-9edc-5f45-aea7-7860dfb37896","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sprk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sprk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee703a2-58dd-5b81-8ae1-aa5663cc6c88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-stader.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-stader.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8a9bc0-83cf-51d0-a03e-3ee23481f5e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-stakingether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-stakingether.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f18a3968-d31f-51dd-8a66-810eb4470010","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-stargate.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-stargate.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a6b313-6da8-51d8-ab7f-81f7ef999030","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-stripe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-stripe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ea9e1fd-5bef-5ad7-8829-e204fed6f515","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-stropepe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-stropepe.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c0d505-ccbd-52f1-840f-934751b062c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sui.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sui.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acfaf250-a335-5dfb-86a5-3000b0c7345f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-sunrise.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-sunrise.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ea7acc-1683-523d-9c0c-d2bc9f9d3447","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-superlend.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-superlend.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc6c3e9-24c5-53bb-930d-114db4efef81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-swanbitcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-swanbitcoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf86013-d731-53d0-9803-2c7f1c8cbc1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-theindex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-theindex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd65f4f4-a058-5aa9-b924-a9410a1483da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-titnupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-titnupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7980049-2f99-56fe-8f0a-ba12a8be7961","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-tokenworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-tokenworks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f46605-db37-5643-bd9a-78d74a755735","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-trulyfincia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-trulyfincia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a57f6c-b436-5490-957e-9465eb000071","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-truspays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-truspays.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b038408b-2a78-536b-bd18-dca81d78e65c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-trustpads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-trustpads.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4651028a-a8b6-5229-bcc6-c7d1c3686305","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-trykarat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-trykarat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a9dfff-e567-5878-a74c-f8dd930354c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-ts.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-ts.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48dd5bff-41f2-51bc-b677-fb28a128e6be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-unipeg.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-unipeg.art']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63dfea53-b3d3-5b29-86a8-99d31baf03cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswap-labs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswap-labs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a5a39c-14ca-503b-923b-2bf4bc3e78af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswap-v9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswap-v9.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9d2c23-d890-527e-be1d-d98b2bb88092","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswap222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswap222.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--764344ab-4884-59e4-b955-9247e01bb2da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswap444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswap444.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23472f3-2ba7-5306-816d-9d4296661805","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswapdex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswapdex.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f82af8-0e9d-5907-892d-25ea9a07dcfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswapdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswapdex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb627b3a-8331-54bb-83e8-919834d3f638","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uniswaps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uniswaps.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--555531bf-5f52-5c81-be75-c159cbb625c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-unlockstake.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-unlockstake.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c7bdf7b-9a0f-5925-b37f-e341ffc259e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-uphold.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-uphold.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a15bc2-6d3f-505d-a85f-33c774a502dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-upshotcards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-upshotcards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--742d72af-7cf2-52f4-89e8-00bc46319f54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-usd.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-usd.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2d1303-747a-52e0-be01-6dfdbb67f360","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-usuarioavisos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-usuarioavisos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6746c53f-2ef1-5faf-bfbf-7c2cd2c598c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-v2debank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-v2debank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9073d55-8fc3-5e97-9be0-2df349666789","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-v3-velodrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-v3-velodrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e470728-0f08-5b9a-b1c7-3b913c4c165a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-vaycasinogiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-vaycasinogiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69523bc-3558-54ad-8cb3-97a518e12ef2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-vdor.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-vdor.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88417275-af84-5893-807f-dd70aac5294e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-vesper.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-vesper.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cb2f4d-8c47-5ed7-a694-ecd8db9498fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-virtucls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-virtucls.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14c01eac-4f5e-5357-ab20-f529ed983501","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-vote-flare-network-foundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-vote-flare-network-foundation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3090797-ded8-5e2d-af0b-71cf93cb0b34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-vvs.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-vvs.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba0f2f7-9fea-5ef0-b808-8a1d838ac912","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-wallet-connect.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-wallet-connect.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870e4008-d1b5-5c5f-902f-405318100134","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-wallet-ledger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-wallet-ledger.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38710715-e4cd-55cd-8768-af058a043109","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-wallet-rabby.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-wallet-rabby.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a5977c-202f-5fe1-9246-3b94f0a4385e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-wallstreetpepe.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-wallstreetpepe.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1e03b1-e24f-5f4a-b530-8ee2c519f5c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-waronusd1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-waronusd1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd56a30-65ba-566d-ab07-63b14492d926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-web3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-web3.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5b4271-75d9-55d4-b2d5-af1ab365ce1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-wellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-wellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dde765e-f9d3-5e99-9fc4-fb21885cc76c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-worldlibertyfinancial.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-worldlibertyfinancial.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af979d2-65a8-5a17-af30-c772c0209640","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-xaman.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-xaman.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d4c20e-a0bc-5bdd-90a1-e0b6bdcab16a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-xrpl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-xrpl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--390a5406-7cd7-58de-83f4-440c735f4ebb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-xyo.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-xyo.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc96301-4ef8-5a87-8902-29690f2c5940","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-yordex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-yordex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d44c1a-21f6-5f9c-9f71-f8de9e86fa80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-zebec.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-zebec.cloud']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--649efb7b-d74a-53b1-829d-68fbc9763aac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-zebecfinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-zebecfinance.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eceffc8-f5d3-5793-86e3-23e4ea9fb632","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-zerolend.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-zerolend.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e685a35d-13fd-5804-938e-c08e1df68016","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-zerolend.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-zerolend.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9948d845-5cfb-544a-8cb2-37dac0c435b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app-zoom.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-zoom.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb06829-9aa6-5943-b9ce-9bb79fd018a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: app1-hyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app1-hyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9388c056-22ef-5d95-b481-f8a4124b66a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appaccess.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appaccess.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef1ca73-3568-5be7-a209-c38bfbefeb01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apparaat-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apparaat-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--293c1136-0036-5b2b-8033-13e6b3375d70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appareil18creditagricoie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appareil18creditagricoie.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be52333-9c3f-5bf0-8a5f-87bbda87f724","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbase-check.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbase-check.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fcc0fd0-769e-5232-893a-4298765c5860","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbasechain-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbasechain-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736f011f-b206-5d89-ae1f-7feffd6ef6ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbasechain-tge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbasechain-tge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2845e26d-1f14-5ff6-bde9-4cb7378b279d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbased-one.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbased-one.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef81b295-961a-54d2-9177-62912f5c2c6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbasenetwork-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbasenetwork-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2ef842-62c5-54ee-a34e-e1ef12f3ad50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbasenetwork-tge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbasenetwork-tge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6013dffc-a83a-5042-9638-55ecc3a8139e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbasenetwork-tge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbasenetwork-tge.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--336c7f45-b43f-560a-a272-377d4b796a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appbioprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appbioprotocol.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672d50df-3002-5f5d-bcb6-4ad038c317c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcamelot.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcamelot.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d01bf89-a53c-59d4-bb71-a5fef603d278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcentralbia24hrs.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcentralbia24hrs.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd297b4-9749-5d55-837c-7a48174cc984","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcentric.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcentric.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b43ddd4-0aab-5480-a5d6-c1e182c95119","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcheck24.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcheck24.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--806199ab-8bb0-5b84-b419-2bb3f001ff9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83d0ca5-cf07-5422-8b64-b8af3d482757","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appconfigrootspaces.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appconfigrootspaces.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df37d14e-6ca9-59d4-82fd-f7d33aabb3d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcoresstak.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcoresstak.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d20766-9fbb-526d-8f42-21491519063d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appcorestake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appcorestake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d192e6d5-d790-5c5d-a269-16e2c09c3a33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appdashboardmonad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appdashboardmonad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0617eaab-8a05-5c31-aa15-e8d7295fd46b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appdaze.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appdaze.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2f55e6-edc5-51e4-a545-081a5e3760ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appe.express","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appe.express']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e461c7-d284-58ba-bac6-8a3b8d950ce3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appeal-boundless.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appeal-boundless.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0726b19-f401-536a-b4cf-500a7379c838","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appeal-grvt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appeal-grvt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4a9631-adba-50d2-befc-a6bf59d0396f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appeal-sm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appeal-sm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--817389b8-d25c-5df4-adf0-5c28801f8488","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appeal-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appeal-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed6b696-f1b8-5583-8440-d2029761af2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealactions-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealactions-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--849cadc4-851d-581b-8841-df6bc41a1888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcase-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcase-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d95f7bd-1a14-5025-b39e-39c44338616b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcenter-tiktok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcenter-tiktok.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd371b77-7379-5f78-993a-91d96d69d4cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcenter-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcenter-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f69cf698-014e-5005-b306-c1cf99c6f839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcenterx-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcenterx-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--201a9b36-1d94-54de-952a-3a785437bb57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcontent-x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcontent-x.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44d96c5-4bb0-5413-92b2-76b469c52652","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealcontent-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealcontent-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb2ce1e3-c74a-5f20-9da5-ae2c05ebb618","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealdmcacontent-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealdmcacontent-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e649c30d-35c3-583e-a2c0-8a5b95283e31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealdmcax-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealdmcax-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4f2bba-2161-54d9-861a-96eabd30cda0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealitemx-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealitemx-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc80a001-a6f2-52ff-bb7f-1fe1019720e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealpostx-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealpostx-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f17024-de85-54f4-b5ae-2c109576066f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appeals-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appeals-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcd5594-90de-53e9-907f-0497e981def5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appealx-x.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appealx-x.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae065149-8838-5a72-b649-1f8c812a17d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appethenavote.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appethenavote.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--becbb7dc-f064-5cb1-9a34-493f5d13133d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appflokidonger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appflokidonger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e5f37a-efce-5f15-a094-9508ce9b8612","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appgootoslo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appgootoslo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ed3988-6931-5f90-98d6-a574896e1bd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apphyena.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apphyena.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ff6709-1d8a-53a6-857f-2fcf9f3112d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appifly.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appifly.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f1cdc2-b6b0-5016-9757-0dfbf4205838","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appinteractievibrokers.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appinteractievibrokers.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741b559b-72b8-508e-b53c-a139206cc35d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appjojobet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appjojobet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c44e0c-30a4-5e4e-b3a8-33f92bc150b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appkastlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appkastlogin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8371c987-8eb2-503a-a65e-427ae6809372","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-contents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-contents.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f8a956-5bb5-51e0-a268-0f8904204cb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-crypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a1fa14-e7b6-586b-a514-16f83bc1544d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-disconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-disconnect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d77cf54a-50aa-5887-ae6f-ceddcce39dfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-events2024.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-events2024.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27057272-0587-54fa-ab36-d60d7453ba90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-id-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-id-review.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ffccbec-1ee8-539a-8fc3-835a1847aeb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-idrecovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-idrecovery.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91b757b-f726-51d7-bb0b-f95e089b532e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-info-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-info-review.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--424aaf14-82fa-5ce0-9320-6e467a5be9fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-metamask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7c3326-4495-56a1-bad3-303773738f79","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-access.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04885978-5331-5403-ae0f-d7da71f83d3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-account.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be04bc1e-6c86-5361-a26e-48358fe4dc3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d09994c7-412e-58fa-ac1f-febb5976df3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807fdcb0-e03f-52ac-b2c8-91f65334ed16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-id792.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-id792.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3991bae-c728-5e81-831d-d8cb4770cae1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-info.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7d6c52-b57f-5d4e-9e65-fcb6aa04c0cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-review.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--901fdf0f-d6d3-5207-a573-54f4a5fd4003","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-status.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-status.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdc74c5-fa16-590b-9d64-e686351c281e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-support.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76200a1c-ae1a-5840-8267-c10f5fd19c06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-pay-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-pay-wallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfafb43b-085c-53f3-a5e4-04888d593514","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-prevention.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-prevention.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--351d874b-a401-5924-bf61-b3d167ecf949","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-priority.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-priority.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bade62-bd00-5655-be32-7da279277728","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-re-enable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-re-enable.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b36319-3e6c-537d-b694-b17feba44ad0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-restore-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-restore-access.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24818539-88e1-5c4f-ab08-7eb723ba1b72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-review-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-review-account.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7235b99d-d289-5a2b-b815-c1c282fc469d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-review-details.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-review-details.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16052d8-4f0d-5f7a-8967-7dd505be78f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-revise-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-revise-info.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c6056e5-da45-59ad-abe5-1d619be4d55e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-safety-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-safety-review.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cc1514-538b-5985-bf71-4927c36e4909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple-securelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple-securelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--160c12c1-55bb-5921-a52d-738f37281fa2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apple2024-event.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apple2024-event.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e89c57d-dab9-5e05-988d-4b5499c16226","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleaccountcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleaccountcenter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01d6021-0e1c-547a-b18d-6758bbd139a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleanalytictracking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleanalytictracking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcba056b-4104-526c-9370-06ab4f0e7a98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleapplicationsdev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleapplicationsdev.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575a8af0-affc-542f-bd71-3850aa953d23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applebanana1.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applebanana1.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0140aa6-fa1a-52ab-81c2-67038ebdd38b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applebeees.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applebeees.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--845deacf-0d14-55e6-ae00-47e57025e5e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applebitcoins.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applebitcoins.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ec78cb-048c-51b7-9d71-e660accdf120","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleclicktracks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleclicktracks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7395a851-39cc-599c-9fd2-948f1a1d9244","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applecoin.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applecoin.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf467c67-4237-5df5-963e-8f4fa2d8f9e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applecrypto-event.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applecrypto-event.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91354e9d-88de-58a7-a8c1-f84386a775ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applecustomerservice.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applecustomerservice.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5580d606-9d4f-5246-936f-6971d8b08354","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appledailypharma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appledailypharma.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a975a94-56b4-5f1b-9e66-12497d74d127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appledataclicks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appledataclicks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc58ab1-c79f-500c-956e-6cb79ebe0ea9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appledocfile.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appledocfile.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6211137-bfe6-5e94-861f-f924ba902598","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appledocslgn.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appledocslgn.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe280324-f6e3-5cc4-8ff0-f1b42842b351","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appledocumentreview.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appledocumentreview.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941d487b-5222-51e2-a32a-88c94e500852","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleemarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleemarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9db59e-17b3-50e2-a0d7-1b3113bc35ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applefixr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applefixr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22832c0f-0d23-533e-9fdc-63c6fca6ea80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applefmi-live.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applefmi-live.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e799423d-68d7-51f6-8959-ff961ab4f1fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleforcrypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleforcrypto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b02110f-18a5-5e93-888c-1ce072a35a5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applefoxcoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applefoxcoin.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78566d12-bff7-580a-b5bb-668294447cd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applegiris2025.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applegiris2025.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92b4bbd9-ccea-5cec-9d7b-508a82ee745a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleid-ifind.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleid-ifind.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0c279d-9aeb-55aa-8272-ac88c2696d86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleid-reactivate725.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleid-reactivate725.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ed2842-9af0-5b6e-8bb9-52daa220e568","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleidrequest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleidrequest.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--038969c9-7f2a-5236-b5e9-2390a2e79b77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applejuice.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applejuice.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da3e38f-76e8-58eb-9f11-765b85222721","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applelake.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applelake.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1705e75b-8477-5baa-b63f-5ff7afba59d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applenotifications.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applenotifications.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4323f565-d0ef-5a08-a19e-0d4fa81dbfbe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleonsol.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleonsol.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b85563-0ad2-5a24-9671-5f6a0e35260e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleonsol.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleonsol.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96716e64-b4ac-5847-884d-6a62253a3c17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepallets.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c579d75-0959-59a9-b857-139283419ccc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-ca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc288e0-1c90-5675-b981-a5817c412081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-canada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93998b11-ccd9-53cd-907f-bcf2f54d41b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-link.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-link.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14499749-653a-58c2-b02b-2fc84730a455","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-on.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-on.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3dca61-d308-5cf8-b772-0fd8922168af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-restore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-restore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ffd0493-8608-5c9d-940d-bc3650d49ac1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepay-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepay-review.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5585bb62-a947-5f0f-ae5f-8d3381845a5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepayca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepayca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0552176a-3641-5ab8-a0e6-6bf5c3caeae3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepaycanada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepaycanada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac17d1f5-666e-53ac-9cd2-263bd2b76b68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applepayreactivation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applepayreactivation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--090b7985-d140-5e78-8b3d-bffe4f4efbcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleremoval.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleremoval.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35705c62-3d11-5c1c-b7b7-dc234e70a150","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleservicedesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleservicedesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92991ad-8f1a-5fc5-aec4-49703c8cf816","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applespecial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applespecial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aed4708-ce19-5a26-b5f6-766ebd68bdac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appletelemetry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appletelemetry.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13956572-6aa0-5206-b90c-4028875806f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleturkiyestore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleturkiyestore.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40c24d1-3485-56d7-be14-63a8f483e3ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleunlockingcompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleunlockingcompany.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--289db4ee-6a92-506c-94ba-12a0dfd241f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleuseranalytics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleuseranalytics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a02fc2f-b398-5d32-b8fd-4c2d8cd7a76e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appleverifiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appleverifiy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b983d24a-f362-5c10-89a4-5af8b1d6f6fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applewoodcontrols.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applewoodcontrols.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1af8cd-e8aa-5b35-9475-a63de323d526","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicamex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab40fa38-7150-50fe-a4c2-4ff1b97d5748","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicantsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicantsconnect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d290c275-edc6-50f1-b303-773838883b6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicantsjoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicantsjoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0875da-3a70-5185-965e-f798d804aaed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: application-bmoalto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'application-bmoalto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ce7371-52f1-545e-99e7-f043dd77f844","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: application-bny.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'application-bny.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb27270-8cb7-5bf4-a6bf-a47691e5dd10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: application-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'application-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c11e6ea-b936-5ba2-a2f5-a4c083dc788a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: application-drift.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'application-drift.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6e3dfb-625a-5725-aeb5-bc9d25c5aab8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: application-trezorsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'application-trezorsuite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98cd4aa9-9bc2-58d8-99d1-24440e0dea8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicationcasinoargentreel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicationcasinoargentreel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e6f0228-eb72-5188-87c0-a8f6cb438ed4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicationcasinoenligne.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicationcasinoenligne.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--259c2eca-fe20-5641-baf1-405464f567d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applicoinc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applicoinc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d444eda4-5581-5756-9c8f-b0270d2d4b61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appltester.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appltester.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--506fdaf4-82a0-53ff-8c2b-e87e942aac3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apply-nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apply-nexo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50fdb60-0c29-5be8-970c-82f0017b66f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apply-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apply-robinhood.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227494e3-494e-5111-98da-da0b5bdd22a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apply-tiktokverifications.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apply-tiktokverifications.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4288335f-0905-5ced-9460-a24c17ba5402","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applyatthreads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applyatthreads.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdafc581-7269-52d7-812d-7c24140eeedf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: applyfazaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applyfazaa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be2c0b1-824c-572d-b8e8-f3cb020df4f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appmislibet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appmislibet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0329d9e0-7dfe-54d9-bebe-2e15d0e86904","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appmitosis.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appmitosis.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57577429-2b71-53f1-a3f3-bf95f5a1763c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appmoondex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appmoondex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe4ef42-07e0-5b45-8e94-64fd4b93d304","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appmovil-santander-inicio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appmovil-santander-inicio.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--249e8042-9048-5eeb-8859-321678810d7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apppolymakret.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apppolymakret.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77356fff-373c-5fa0-8852-f8b58adad6c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apprevoke-moonwell.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apprevoke-moonwell.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6224a2-0b71-5c59-8bb9-db65d742727f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approoster.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approoster.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--959a2dc7-3719-5123-8a8a-e60e7da59265","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvalmechanism.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvalmechanism.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b4b35de-fb62-5035-b28d-dfdf73accd21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvalreceipt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvalreceipt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f61e424-5534-59d8-bdc2-d1bf4b7fe6aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvals-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvals-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82605b9e-d58b-5359-b8b8-47a236fbda37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvals-ostium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvals-ostium.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a28d837e-114f-5edd-9590-e5bb694634ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvals-penpies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvals-penpies.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f0fe867-bf4b-54e5-92ae-7558329111b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approve-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approve-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d20517d4-2c62-500e-a513-54684feeadf2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approved-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approved-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f00d05-a14e-52a0-8e8d-bbf300998c7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approved.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approved.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6feb953f-f5c3-5de4-a8aa-a8c53f0b7910","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvedclaims.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvedclaims.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9356e40-87bf-514a-bd2b-feb62eb441b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvedclaims.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvedclaims.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f650ec-243e-535b-9880-f24ceecc41b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approvedclaims.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approvedclaims.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebfb925-ca97-5b1c-a46a-936230434092","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: approyalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'approyalbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2cefe6-e6fa-50fa-90a5-79c497b74206","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-asterdex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-asterdex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a51f93c-3651-546d-8dbc-5c818a69eb89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-claim-monad.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-claim-monad.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01851003-b3c3-503b-99d4-d7ec75e19d71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-eigenlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-eigenlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cf6aafb-aa54-5114-9414-40c4d140b71f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-flarefoundations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-flarefoundations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1047236-5a7a-5cea-ace9-4574bcb75c28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-flareportal.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-flareportal.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--694db6d2-54e4-56e5-b17e-774a578c1e52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-flareportals.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-flareportals.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c640ba4e-f258-5526-a018-0df3cae1e0c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c050bb35-2891-5f51-9930-9cdc54c9da9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-googleplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-googleplay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be62b07-d005-5af4-8af4-a7759dbcae07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-injective.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-injective.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0f07f60-2cc7-55c0-9ef8-7b0c84d8a6b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-islands.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-islands.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95ba017-44e9-547d-8649-d671b6472826","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-kavbet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-kavbet.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d6f8df-cfed-5b5c-b682-b413b526f980","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097419fb-c5aa-558b-b792-90db4d28223b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-kucoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf269ca-98a8-5331-ae8a-90c60a1882c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ledgar.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ledgar.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38349591-dedd-5f52-a0ca-d5db7cb6d11d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d558dfd5-c9e9-5df4-ab64-54c4623bf7a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ledgor.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ledgor.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfcaf883-4600-55b1-99cc-ace3eeec46b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ledqer-com.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ledqer-com.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8ce7ed-83bf-5fdc-8fd4-2e8ee65219e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ledqer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ledqer.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d8e9b2-3d6b-580b-9ba7-2f92ee588319","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-microsoft-cleaneroneapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-microsoft-cleaneroneapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72141abf-8194-524b-a263-03dd92600e0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-migratesfun.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-migratesfun.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56c52d9-7a65-5a6a-8da5-7b5bae586f17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-monaddashboard.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-monaddashboard.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--356e3ccc-6cb1-5589-bf3e-b839692896b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-multichaindashboard.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-multichaindashboard.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8b0ddd-76a3-57fd-b2ab-b8a63c899625","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-ratex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-ratex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe62bdf-5229-534c-9876-e5eb198b9268","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-soil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-soil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--904435af-acc2-59c7-996d-680addcf92ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-tanssi.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-tanssi.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a35f7f-d3d4-5870-924e-a010592a3981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-trezor.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-trezor.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceb6c499-3fe2-523d-873b-29e8b300daf0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apps-wise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apps-wise.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffb14c9-a65c-532d-a4dc-8238eabb315e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsbmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsbmo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ea36b1-d82b-598c-9c0e-129ab9c40b2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsecure-chase.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsecure-chase.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--697f3ca3-e76b-5162-b2b7-8680f45f7004","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsecure-login.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsecure-login.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b16dfed-a9a9-58da-aedd-fde07d2ee401","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appservotronix.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appservotronix.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7d62cf-3de0-5c6a-98bd-e39a039c4c86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsjojobetmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsjojobetmobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbec5e24-17a5-54ed-8702-55329fe44ae7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appslots.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appslots.store']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0a7589-eb54-565c-adaa-197f441320f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsolmint.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsolmint.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa02521-4c08-5281-9c59-4c9b0d29ab02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appstarlaunch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appstarlaunch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ef1644-2062-5564-921e-db51847998ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appstorescotiaonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appstorescotiaonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47af6dbe-8c1e-5098-8f90-669b52f07f10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appstrategy.uno","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appstrategy.uno']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb509c3d-6938-58b2-aff5-b07891bb7121","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appsuitetrez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appsuitetrez.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97740ee2-6e6d-596f-9c0d-cd2033d85ab7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appswap.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appswap.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e8b088-ab3f-5abc-9ada-6869f1d295ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apptan-dkb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apptan-dkb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63a23355-efc6-5dc2-9134-889243401605","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apptesterheld.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apptesterheld.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a000af8-4ba6-511b-aa70-95a41a02a60b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apptopaz.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apptopaz.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cda44cb4-63d7-58e5-88fc-9f0ea2d92594","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apptornado.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apptornado.cash']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b8c64bc-6aa4-569a-a908-904f5d7fe67a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apptradexyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apptradexyz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4068e126-3111-5a3c-81c2-84a4bab45aa1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appv4uniswap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appv4uniswap.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c4ef82-87a4-5fbe-9482-00f60408ed61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appwave3evmgiveaway.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appwave3evmgiveaway.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81b1d31-b735-51b2-99ac-cc69c116a4f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appzoom.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appzoom.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea495891-0265-5f4d-be36-cd213a3edd84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: appzyfi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appzyfi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bdcf0e-8c0b-5f02-9a39-95b7107c26d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aprallocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aprallocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc4ff50b-78e4-57e0-9399-1fa80f2634ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apreth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apreth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56cfe673-f651-5365-8710-266561465796","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aproveite-vantagens.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aproveite-vantagens.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d279c5b-ba5a-55df-82f9-f04a0411b001","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aprovel.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aprovel.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcecd1f-db8d-56cc-b8ef-d73fd1a73b18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aprusd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aprusd.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439de353-4ec6-5b65-a1df-f0a16ac95659","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptclaim.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptclaim.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a92872b-1b8b-544f-84af-e43c27232c5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptechts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptechts.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7893f18-a62c-5297-92ca-f8601525d19e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apteka-haifa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apteka-haifa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab43afa-6f40-579f-a340-125fd1c178fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apteka58.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apteka58.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24878d53-36a5-5244-a2b2-e465650b64dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptna.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptna.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c0429f-6cf9-5e68-8add-33c541f971c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apto-rumboanza.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apto-rumboanza.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aa0bc79-ce55-5903-af4e-d4b7fda8a956","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosclaim.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosclaim.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fce3039-adda-5dbe-986b-79a07f90c492","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosclaim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebf1e67-aa14-5ce6-af11-4289ad2447cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosdao.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosdao.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755fdb5c-7830-55ac-aff5-9c9ad9fa3ea7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosfoundationdao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosfoundationdao.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a425d4a-d571-5c09-9863-1cb779d922ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosnetwork.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosnetwork.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a9da70d-29e9-56ad-a94b-e50df4605aa6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosreward.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosreward.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d77af1-7798-5ed5-b22c-b0fbce542514","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosrewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosrewards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c001eb0-82f4-5441-bc5b-327b376dd414","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aptosx.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aptosx.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166d252a-0559-58b8-9dd3-fbec27a52064","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apuapustaja-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apuapustaja-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8af0a8f2-50b6-55d6-9644-91646ca77b88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apucoin-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apucoin-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce60816f-05e4-56af-b24e-c368044666ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apuesta365argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apuesta365argentina.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79c74ce4-193d-5e79-9834-5ef8fa2d406f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apuestasargentina.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apuestasargentina.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4a3dee-fdae-5c86-b360-9366f932ab98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apuestastonybet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apuestastonybet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a71e9c-f192-5ffa-bef6-58a5c4da3324","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apy-bnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apy-bnb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae86662b-519a-55ef-9180-facb82ceb21a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apy-bnb.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apy-bnb.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2351a0a-382b-543c-b5db-0951d16e5113","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apy-eth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apy-eth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a56984e0-4ceb-51ed-bc18-525f7a43ca12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apy-eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apy-eth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaab539c-4769-508d-b5db-5ce65b2f8aab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apy-shiba.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apy-shiba.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9664fd92-7850-51d6-8f4d-a932b203aed8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apybnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apybnb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6f1009-91f5-5511-bb2a-b2a596b887a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apybnb.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apybnb.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e893d1-257d-5974-86a1-12317217acab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apybnb.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apybnb.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c10d83ee-6847-54b2-b14a-8d6475d0bc23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyeth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyeth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f94e7b8-041a-5587-8693-4009530e6c7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyeth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyeth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1187f125-9b9d-5ca1-ba61-0ad4fd8f4dba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyether.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c6b7be5-bd25-5235-9b5a-06450decb909","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyether.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyether.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7756bfa-8afe-5911-b10b-73b7c1e37a6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyether.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyether.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8419e5f6-781c-55a4-b3fd-80d7766db46e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyindustries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyindustries.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a8fc74-501f-50ae-9a6d-50838a9c8c70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apylido.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apylido.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f8b0b54-d4c7-5b1e-a28b-6793c1e9e59d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyshib.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyshib.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a8a4141-c7c0-5a06-af51-cd81c692d83f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyx-vote.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyx-vote.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32489aef-585d-54d5-964e-f4bba791d13c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyx-vote.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyx-vote.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c9f786-8dae-56bd-a5d1-e2acbcec86cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyx-votes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyx-votes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--054a6c71-6f9f-50b9-bc51-0652cd262103","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyx.vote","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyx.vote']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55988453-e3ff-58ae-bff1-4f595d532ac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyxfi-governance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyxfi-governance.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b092dba-8529-5d27-8725-c716062d544f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyxfi-votes.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyxfi-votes.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--663b8664-af4b-5bd9-9bb4-a1640e100234","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: apyxfinances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'apyxfinances.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d78b3b-ceb7-536f-bfeb-dc0449483914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aqisinvest.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aqisinvest.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca3d4c0-7b14-519a-a7e4-c9262509afc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aqualibrattitude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aqualibrattitude.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11276719-de9d-59e0-a852-21ff4118b609","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aquarium-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aquarium-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9272d82a-10b5-5515-aa9b-5c4ab95a6e91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aquawallet.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aquawallet.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d787eec6-0a89-5234-b416-755ce19dc138","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aquent-hrteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aquent-hrteam.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--495645eb-0e27-5d7c-8e40-8acd0c0c5829","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aquijuego-casino-colombia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aquijuego-casino-colombia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1f4e9c-7fef-55d6-8637-697032afe603","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ara-gov.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ara-gov.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c661e24e-2b85-5bed-a30e-1fabf6402bdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arab-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arab-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e664780-176a-5516-a2e8-88b508cb946c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aragon-dao.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aragon-dao.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf64323-ba7e-55e3-abd4-823e35b1209d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aragon.skin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aragon.skin']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6176a23f-33b9-566c-8f7c-751ff5a89c5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: araisystems-airdrop.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'araisystems-airdrop.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97837ad8-20b8-55f1-ba28-0092b66f25a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aramatalepleri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aramatalepleri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be2d0b3-2f37-5503-a240-31dd6737dc71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aramex-app.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aramex-app.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abf22ce-392e-5314-bd82-11fd9b042ee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aramex-parcel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aramex-parcel.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd06b15-4773-5004-8095-d6fb2af48c5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aramexslogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aramexslogistics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5aefe52-f4d1-5ded-9ce3-eab2ed6114ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arargentinacasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arargentinacasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf5b9b3-ec1e-5010-9a7a-80d33256fee7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arargentinacasinotop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arargentinacasinotop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe84ffb5-5173-560a-9f94-513f21c4331f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arb-distribution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arb-distribution.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca5274be-3455-5180-ad51-a689cff2b2a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arb-swap.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arb-swap.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b4b9c50-b59e-5359-a780-b2c863f08d68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbbirdge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbbirdge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c7a8cc-a30b-587c-bce0-46f482b0f6ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbbridge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbbridge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c6711e5-bbec-5ee3-af82-09066a0b1427","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbbys.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbbys.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5531f08c-11f6-502b-b5a3-57048ac0eb95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbcfd.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbcfd.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3b6266a-d2f6-5098-9b38-550236c63fd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbcoins.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbcoins.world']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--287172b3-32e2-550f-96cd-3178cfb1e0d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbdogeaiclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbdogeaiclaims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7084b6f0-ffd9-580c-8cfa-cf1acc5b1d12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbeitsportal.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbeitsportal.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae6ef9e-91dc-5a91-970d-a2f8fec6d4e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbiflow-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbiflow-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529d428e-f72a-5b87-8b84-36a44503123a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbinioindia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbinioindia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a74fa-a13f-58df-b291-1b35044ad13e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbirtum.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbirtum.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ea5d60-2f3b-5565-9506-7eae526e7c82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrage-trades.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrage-trades.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9ccf8f-4cdf-5630-96ce-cd2a015a5c08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrage-work.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrage-work.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc931e5-e390-57b9-854f-4bdb651bd349","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitragebot-nl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitragebot-nl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3488c7e-c892-5b38-b62e-c53e8fa9bd2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitragesystembot.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitragesystembot.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c06bae4-246b-5a64-9482-5cc44a68e386","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7f028a-bbbc-5b96-b029-e2887f20055a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf3b162-3b8e-5abf-9bb8-8d23c1d9a8c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-distribution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-distribution.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71e7e70-bdd8-56fc-be04-75609b6c265f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-drip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-drip.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21d1988-d576-5c5d-8674-7302855d0cdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-eligible.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-eligible.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d37657f-372f-5f5c-abae-a51432632b14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-etherfi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-etherfi.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b129f93-3aa4-5f7b-b7ce-43ab8a59dcb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-foundation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-foundation.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f024eb1a-7345-57a4-a523-14fa2db41ba2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrum-mixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrum-mixer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec1c54e-5f69-552e-a3a9-95d29713af00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumdrip.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumdrip.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4f5c72-85cd-5a50-bef9-f9f0c43ab1eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumdrip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumdrip.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54a26eb-150b-5f6d-ae2a-93d67cf2f0d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumdrip.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumdrip.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--193bfd6a-736b-5cb0-a3bb-70d9598f27db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumpad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumpad.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b2df9e-3551-5db1-b995-c70eb8a28e42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumstoken-gateway01a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumstoken-gateway01a.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--486354a6-8a8f-5477-b0af-e484d13b9153","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbitrumweb-launch.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbitrumweb-launch.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdaa5344-fbdd-53af-8892-a0a1b216f3f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbshield-builders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbshield-builders.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4b000f-90fe-54a4-b1a7-115be8ebd6b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbsvvap.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbsvvap.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60554ad8-3300-5023-b9c3-e6bb4a1fdfa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum-birdge.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum-birdge.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9598969b-3607-506a-8fa2-c8852a28c0e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d44220-debb-5056-9e18-365cb099d20c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00ddb0d-900c-5578-88ab-ee4b4881ef81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50f613e-c863-5c1c-b9c6-2428682f270c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1d65e9-397f-581b-ac46-b6a546143291","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b71e99-6254-577f-bbc0-4de9e57c0374","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtirum.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtirum.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d788b0c1-5341-5494-9b99-8fd68e86064a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbtrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbtrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa124cc8-6a24-5e41-9a94-db39bf41b6c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuspool.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuspool.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3983043-8429-5e9c-af46-6cbeddbace6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathambusiness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathambusiness.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55cd08a7-d90f-5463-b514-3fdb687c0f0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathamhelpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathamhelpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02e4a9b-d94f-54f9-b75a-8945854ab4e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathamonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathamonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d935447d-31d1-5c3f-8a44-83e3325cd7a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathamsafety.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathamsafety.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93725c61-a078-5528-958c-8c17353de37d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathamsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathamsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc5cdf6-cd73-5f45-92e8-443df9bf59df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arbuthnotlathamsecurity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arbuthnotlathamsecurity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4de7ad7f-e2b5-502b-8ee9-a41906ac7429","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcade-rewards.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcade-rewards.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd01e2cb-fd3b-5ce9-ba4d-f3457415261c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcadiaweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcadiaweb3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--390c8d12-9f97-5e21-bb24-e79821c4c733","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcai.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcai.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d059f184-01d1-5fe0-af27-b326f02e2e7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcanapool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcanapool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af644552-b1b0-5cb1-9dfd-1402c5261e27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcblockclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcblockclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e63f97c7-97fd-5fcd-843f-b624976e41f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcfiow.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcfiow.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51766b99-e0fb-5a0f-9530-9c3f3176f607","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archetyp-darknet-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archetyp-darknet-market.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc70946-5950-5f39-84db-9f28c5543124","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archetypdarknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archetypdarknet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9c9bcb-e59c-555e-bf31-a1a1088ace74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archiveplatform.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archiveplatform.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d946656-5f7d-5278-a10d-ffecacc50e3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archiveplatform.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archiveplatform.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a287ab8-5c01-5496-a965-b3a3172f9497","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archizines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archizines.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8df180-3d1d-5678-b95b-37308c2951b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archonleaks.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archonleaks.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87a5c4e3-5eee-51db-8fab-9f8395a78edd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: archspeech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'archspeech.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed68e2e3-243f-5c0d-a9be-8796cdcee012","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcium-rewards.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcium-rewards.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--472cefd8-fed7-5650-800e-19bfa4a290a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcium.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcium.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a304230-d13b-5f6e-957d-1ac6c3084f92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arciumreward.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arciumreward.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3350bdb3-a5ed-5023-b101-5a4cc8e9d132","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arciumrewards.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arciumrewards.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56242b15-a2bc-5bbb-8eb8-9cd18fa8d81d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcstreas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcstreas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4a0c1b-cdf2-547e-b57d-45c33d584c6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcus.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcus.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80742e68-b210-598f-b311-0badca3698e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcusdex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcusdex.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf5a309-494c-5672-ae39-d27055491ca4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arcusdex.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arcusdex.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--996563ce-73d1-5709-bca7-5bc29cacff36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ardenteit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ardenteit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21df51d4-6f8c-5160-a604-379f6ed66859","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ardevorn.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ardevorn.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9608743c-811f-5f7e-b246-454dcd2fbee2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: areasoporte.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'areasoporte.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ba3763-6cde-5257-aab1-df69e7e96aba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-abudhabi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-abudhabi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56ee8ba-babd-569f-ba66-28884d34bac6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-battle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-battle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--256eacb4-1233-51bb-aeaf-d065a3e38f68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-battle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-battle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b8325c-1d11-59af-abbd-1b43eed4b201","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-casino-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-casino-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1cd175-59b7-5c81-b2e4-e29c1945d006","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-casino-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-casino-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74b4960-9520-58e1-9e3a-ed3555989edd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-colosseum.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-colosseum.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2125ca20-0548-5734-b1fa-b0453f3dbb42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arena-onlinecasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arena-onlinecasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c3b420d-d663-561f-882e-a7a3533bb66a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arenaairdrop.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arenaairdrop.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--917ed6a7-f9c2-584c-a3b0-2221204345b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arenaliveplayph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arenaliveplayph.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8e4ab2-257d-5404-86e0-bd7ee68b8ed5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arenapw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arenapw.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef265db-b613-57df-9947-32969b371eda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arenavivait.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arenavivait.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd15e2b-ecd0-5382-8829-956f320bd876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ares-darknetmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ares-darknetmarket.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4031629-7e96-55c7-833d-2ce5894322f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ares-market.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ares-market.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c64e18-80dd-572c-ae97-700f4d4b5213","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ares-marketdarknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ares-marketdarknet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4a488a-7b70-5a89-9d87-f4cd51a03e02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ares-official.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ares-official.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a693d196-176b-5374-91ff-5fed1af68b3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbeett.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbeett.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5832b0-7ad5-5a70-9a11-a49c4fcc7bfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet-2026giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-2026giris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7713ea7c-8f09-512a-9626-cf3576711cec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet-adresin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-adresin.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6318a8-38e4-52f9-bece-e2a0104f1a22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet-appl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-appl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee79bdc4-b2d2-5f2f-ab85-9c61b27ae53c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet-onlineadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-onlineadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--099279f4-8aa8-5531-b32c-be109a0c32b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet2026girisadressi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet2026girisadressi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89409b6-08db-534f-97c2-68468bf3278e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbet9l0.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet9l0.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e927d9e7-2387-517b-8a00-17dc5dfc96c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetadresin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetadresin.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b7bc0c1-702a-5702-9fc0-fa014c13bc23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetelpatron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetelpatron.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b35ceec7-706f-5fe3-8e5e-9e42b5bb455a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetgirisadress.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetgirisadress.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab241f19-81a3-5c84-8a35-ce513063ea5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetgirisleri.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetgirisleri.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6cb418d-1cf6-5918-a9de-6fffc5c9b654","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetgirislinkim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetgirislinkim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f1c4ca1-0afc-5452-801f-22ba78a8a6bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetonlineadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetonlineadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f25ac7c-4a8f-5548-ba8c-3965bba9d64b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetorjinal.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetorjinal.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4924456f-7ec1-5eb2-bcb6-e81597b43199","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbett-giris.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbett-giris.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb8d4538-d014-5fe6-a9a2-97a5c083a2cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbett-yeni.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbett-yeni.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd31614-ff0a-59d2-879c-88198881e084","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresbetyenilendi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbetyenilendi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c2eccc2-2f34-5ebb-ad14-fca80748097e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresdark.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresdark.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--080a1aa3-77c0-52cd-86e0-66a4a37001be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aresgirisbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresgirisbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf1f7d7-34c7-5bde-96fa-f6f4777d6aaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argametop.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argametop.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a83d8d-d059-5d30-a15f-e84668f700fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argenta-appsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argenta-appsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a83a7b6-309c-5eda-a150-4eb245ff0b41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argenta-bank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argenta-bank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a6fa30-7a49-5991-b7dc-a87c13c5914c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argenta-be.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argenta-be.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b593ebe-9658-5023-8a53-4654bd481b34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argenta-bevestigen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argenta-bevestigen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90ef2a3-d9d2-5a2f-b4cd-309e680dd589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argenta-informatie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argenta-informatie.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92359db2-fc23-5b55-81bd-46ee6bf345a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentabevestig.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentabevestig.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06bcca07-bdb7-5aff-ab95-53785477bd4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentadirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentadirect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4bd9ed-a58b-5e63-afc9-2aaa0111a0f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentfluxor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentfluxor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c465c50-bfe5-5b03-8353-26141edd210e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentiflow-gpt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentiflow-gpt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39647a37-ddf3-5658-b383-f28fa407f497","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentifundex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentifundex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f568b4c6-20c1-5bd8-8368-dc77c22fd5f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentinasafecasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentinasafecasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d33990-2206-5215-ac3c-8ff6cd65f592","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentinocasinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentinocasinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f6a3a3-2ed0-5f9c-b89f-83978e1a0b2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentinoscasi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentinoscasi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--871daace-aafe-501b-b211-3caf86f1ea22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentixcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentixcapital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--198a7214-9e5c-5590-81e4-a660bd334e96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentixneobit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentixneobit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f037ef93-98e1-5065-a6aa-29cf23d22457","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argento-flowdex.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argento-flowdex.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c028e7d-c58f-5f51-aba8-adc9a108c1ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentobitfundix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentobitfundix.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--197b68f1-c35a-5ad2-839a-f3aef0191f88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentoluxeron-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentoluxeron-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452c0b8e-7b55-5919-ba74-031c891b05d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentquitravaille.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentquitravaille.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dde50f-b9f5-5c2c-a2dc-ccd22299ba5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentta-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentta-online.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18198b6f-2bf4-51a8-8d8d-ef474b36fc57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argentum-global.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argentum-global.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3420f8-2cf0-5027-b478-a5f0c5861d08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argoblockchain.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argoblockchain.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d96e59e-3c72-5da2-abac-447505981811","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: argsave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argsave.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c64844f3-988d-57d8-9b8c-4032b7b1f926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arichain.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arichain.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b5d17b-fe97-55ab-bf45-de9ef6d35f38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arichain.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arichain.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf12072-16be-577a-9fd3-bef1ba101a4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ariel24.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ariel24.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65db676d-f49b-53a5-b5dd-a86b05a2a878","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arionplay-casino-ph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arionplay-casino-ph.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2b7530-6d5d-5249-a21a-5ce4ca7f776c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arise-angles.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arise-angles.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36741ef1-0223-5db0-963d-b6b08cff3636","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arkadacasino-play7a.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arkadacasino-play7a.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1134c3-98cc-5c4e-970b-546ccac60a0f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arkadacasino8g.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arkadacasino8g.top']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--458d5665-640f-5b05-89c6-7bdf566b3c3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arkeya.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arkeya.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f8791f2-2d79-5b32-a5dd-6b16f1ae0459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arlequin-casinofrance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arlequin-casinofrance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2467944f-c8ad-56ec-88e9-c3cf4e9750ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: armani.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'armani.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc33cb78-478b-53fd-b514-1aa143a2532e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: armayalitim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'armayalitim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebd1eb4-ec57-571c-9b5f-c9dcfe1c043a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: armorbotuu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'armorbotuu.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24face32-0e02-58eb-a057-1a5e2078003d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: army-updates.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'army-updates.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e2c28f-5028-5eef-90ed-3442462e52a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: armylabs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'armylabs.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96af8a87-88ae-545a-84bc-a969f76fb184","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aronetwork.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aronetwork.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26962946-d81e-5757-88b1-0c84c731d069","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arotx-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arotx-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--182c1b60-6d71-5165-918d-e9808b062f0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aroundtheworld.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aroundtheworld.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05ee491-6216-5620-be8a-ceb206e21215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arquitecturaenacero.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arquitecturaenacero.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a59cbaee-ba2f-5f1d-a12e-a41cb3eddeb1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arr1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arr1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f06967-81d8-583a-820f-d59d7e5c89d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arrakisdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arrakisdex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--daa82096-9db7-575d-8bbc-2ce421b184ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arretonslechocolat4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arretonslechocolat4.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893e904d-7d4c-5513-b11d-394159085907","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arrowfinance.events","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arrowfinance.events']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64dd985f-4357-5f3a-b94f-4c9c0a1226d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arrowlauncher.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arrowlauncher.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ba5784-c6f6-546b-9cbf-95c5c5ceea1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arsbt.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arsbt.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be64afe-d652-5a78-b236-bfb30658f957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: art-attacker.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'art-attacker.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1fe490-7a3b-50d4-808f-d66af0c7e518","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artattejarattweretit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artattejarattweretit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1bcac4c-1db8-58ff-8e9d-957f31b35b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artbbs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artbbs.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b9c476-9eda-546d-8d54-a7d56790ee91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artbirum.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artbirum.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--539ff278-b54e-567c-834d-05a734d2bafd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artblocks.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artblocks.world']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68544e3d-637f-5b24-8c7f-4020c68ea926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artblockses.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artblockses.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3036dd6-efa2-56d7-bd91-0e1ceeea6238","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artelllc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artelllc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee331575-ac2f-58c7-80e2-5697b969fee3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artem.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artem.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb93316-1aa4-57f4-831a-2c5209ff3b00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbahis1055.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbahis1055.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda22a18-af21-52e2-a98a-e3fa047da93d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96f35f8-91b9-5f7e-bf1f-c43ae5bafb60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-app.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-app.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--772966e4-8147-5b86-a331-e498c515e54e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-gir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-gir.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47f6938-094c-50db-9ba5-a813b33980a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-giris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-giris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09a052e-3be4-5d02-a45b-f475d58a3c4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-mobil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-mobil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da64a5ef-23e5-5a6b-8e95-618be832058c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-mobil.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-mobil.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a441407-8ea3-52f2-a6e8-53bbf6ca39ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-mobil.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-mobil.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2a36c30-04ff-57ee-895d-3155901f0d9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-resmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-resmi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ecbd5d-5a88-5c3a-a9ce-dbbb245999ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-tr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-tr.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b72e7c-ba3e-5aad-8b38-be4e995362fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet-yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet-yeni.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a948304-5d26-5ee4-9e1c-9d3ef3389503","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet1176.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet1176.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1275754-4ce5-5b77-a360-1c8b0d85d476","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet1177.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet1177.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2672bbfd-4416-5f7c-bf13-63a43e9cd253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbet1182.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet1182.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d64d4b-c8db-5daa-99ea-679ed6292452","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbetgiriss.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbetgiriss.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90a7f038-0d48-51e6-bd41-719ea344e171","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbetmobile.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbetmobile.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a03c68-ddf6-5f11-88f9-d869668ba6f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbetmobiles.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbetmobiles.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad410328-5446-5c18-bbb7-adc4b9f5eb9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbetonlinegiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbetonlinegiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc6fb4b0-0bc2-5ffe-a898-fe4f1fb783cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbett.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbett.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dfd6f1d-7bc7-565a-ab11-dc095631ba03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbett1176.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbett1176.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6e860b-8765-5e1b-ac9c-5f4c435f939c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisbett1178.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbett1178.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf370c6-1aa9-53d6-8f39-510a33176e73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemisvip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisvip.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a29bf0b-c09b-5bff-8291-0efe523f8d72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artemizbet1176.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemizbet1176.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65997013-8b3e-5784-b599-70a2e1639230","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artenisbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artenisbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0649f776-09b0-56a8-8347-cfdb61dd94a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artesanabags.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artesanabags.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b19c19e-c4b7-5428-8ff9-dba856575c5b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arthawealth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arthawealth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b813ffd-6c58-552a-b5b7-202dcc810820","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arthroviaai-it.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arthroviaai-it.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b017a0-2063-59f7-8849-fe11bd7ee401","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arthurstatemanagement.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arthurstatemanagement.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5688c9a-2008-5eae-a404-dc48284f1f02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: article-intelhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'article-intelhub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be402a6-fa06-531f-8356-3146fbfea286","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: articpablo.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'articpablo.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5790f2-440e-590a-8bda-61c3ee061935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artidomi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artidomi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56acb118-2976-5d7e-870a-5fd071b1cfa8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artificalinu.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artificalinu.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24152b24-7f45-5be6-b360-aeca503f1358","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artikelkleinanzeigen.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artikelkleinanzeigen.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc0e53f-deb0-52b5-bd65-9e1095e8d948","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artismirabilis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artismirabilis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3f9bd4-c5f8-5bc8-9f49-2a9fe9a64c3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artrades.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artrades.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--166cf4de-fff9-5a67-bbd3-44748fcf8622","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arts-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arts-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328fb859-7853-5991-b255-3a89b8d0aeb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arts-apple1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arts-apple1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c98b8f-c568-565b-8508-9136d99c09a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arts-guvenilirsiteler.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arts-guvenilirsiteler.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97f6814c-1c71-54e1-9f7a-dff578260ab1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artse-firsat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artse-firsat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd7fe887-bab4-53e6-9e67-2278f2a55158","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: artse-firsat1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artse-firsat1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05df75c-3788-5c8b-b970-80122fa30275","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arttemisbet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arttemisbet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f7d82-a8e8-52ba-91d1-05bbbe34ba91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arttemisbet1176.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arttemisbet1176.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c4d62c-831b-5c54-ac0f-4387c0b0944c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arveluxi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arveluxi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f155d70-a03a-567c-8cf6-f2e30460487b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arvenabit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arvenabit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815bb640-7134-5c49-9db9-85f3b50df481","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arvesllogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arvesllogin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd0299d-f759-5a86-af81-bb33b2498a41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arvoxbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arvoxbit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7604dc44-417b-5991-8904-7d87f47b6efe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arweaverewards.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arweaverewards.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4f7fae-2567-5211-96ce-54566859453d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: arzneimittel24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arzneimittel24.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5862841b-f607-5bc1-a012-6487afcfd17a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: as21k8s821kasowquqsuiwlqlsoqg1ksayw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'as21k8s821kasowquqsuiwlqlsoqg1ksayw.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cae95e5-5696-5876-b1bd-a9dd4bc129b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asaalishop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asaalishop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de42fcb8-4fe2-506e-bf83-514b9693d560","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asap-markets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asap-markets.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dbda61d-22b1-5f68-a51e-672e3e4c1fbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asbet358.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asbet358.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--481ca107-1890-5def-a56d-95411d853aeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asbfastnetsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asbfastnetsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53001f9-0acb-5d69-a76b-e6d0a8b0e200","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascarding.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascarding.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc9cfc2-ca53-5e09-9e30-79ee8e48459e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascendex-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascendex-hub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--754862d0-c16c-5d2b-942f-8951d31df3d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascendex-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascendex-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89459396-cc19-5303-815a-2b44331c4cb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascenso-luxentia-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascenso-luxentia-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe60563-260d-54c2-a394-8bee86ab836c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascensoluxentia-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascensoluxentia-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28a9abe8-cc13-588a-8dbe-92c15f6bd516","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascesafinportapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascesafinportapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7ac0e1-87b3-5a4f-a6f7-85241fcb375f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ascess-docupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ascess-docupdate.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf3783d-dac3-5804-b330-2aaf8c9e05b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asdajansjdi21938hggk298fhaaiojf2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asdajansjdi21938hggk298fhaaiojf2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8361f5-3096-5e77-800d-36f7a1e51b8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asdasfa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asdasfa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b973dae-05a0-5ba5-861c-f9ae9bf4ea75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asdcofficialssadsystemk.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asdcofficialssadsystemk.world']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda12470-a98c-583d-8ed5-3b30681d62a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asduyasuidyas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asduyasuidyas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0595a89-e021-576b-a339-4c4e72c7fe56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asesoriamx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asesoriamx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4511baa4-63b8-550f-9559-f8bf7f0a52ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asess-claims.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asess-claims.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0868bac-9889-5230-9f4f-86f764fff791","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asfasfqwf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asfasfqwf.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f535192-90c4-565e-8fc3-f01eddf752ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asfde-toll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asfde-toll.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340bf1cb-546c-5290-b687-8596698deae9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asfdsdassadas.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asfdsdassadas.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47fad97e-1357-5782-92df-12a4565ce433","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asfenag-eu.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asfenag-eu.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ed298a-615a-5c94-8e1d-fb370af06769","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asfig-strasse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asfig-strasse.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2b8981-fcc7-5325-9f1f-35098aeb2f0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asflheg-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asflheg-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c3994b1-c176-58d6-af5a-c6b8da6f0b27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asflsapp.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asflsapp.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b57ae99-357c-5cdb-bfc2-2669aa249422","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ashaley-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ashaley-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e2f6ac1-a35f-5087-8174-bc905a37047b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ashib.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ashib.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a074c97-851d-5b9e-b554-98c4bdc6320d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ashmemecoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ashmemecoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1860e34e-fbc8-52fa-872f-782e37c38b91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ashot-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ashot-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e447ae-bcb7-5b99-a376-b26e70a4b11f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ashpaltlonpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ashpaltlonpro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cfdc884-f9ed-5dc0-af94-d36c60f1544f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asia-promo.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asia-promo.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e6f65ab-80ea-57e3-9613-3c3bb720cd8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asia-qualityspeed.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asia-qualityspeed.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0167de42-09ee-587c-b3ff-9475c00104f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asiax.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asiax.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef4076be-eb3e-5a94-af4e-2b72724143ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asinage-shop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asinage-shop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e565bed-55a3-592a-ac88-03fdad12ac48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asistencia-clientes-empresa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asistencia-clientes-empresa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73bd165c-d0dc-5cce-b62b-9b1f34208690","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asitage.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asitage.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7beccd7-5e0b-5788-a2b6-129655bf12a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asiuno.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asiuno.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--678df1cd-a363-5f09-9a01-97f17f33aa87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asjkfalasfkaksflalaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asjkfalasfkaksflalaf.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--037ab69c-5632-5fb6-af33-5921f1ee3ad9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asjkfhsd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asjkfhsd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75948bf2-fb5a-5346-9474-2a59496481b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ask-splat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ask-splat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd7a7e8-ae48-5f8f-b596-cdc524738bf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: askarova-exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'askarova-exchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98671c83-c788-5f92-b0bf-e3b6b330ccbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: askmyke.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'askmyke.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4823e4b-dc04-5e08-968a-60b378392b44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: askvenice-event.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'askvenice-event.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ee1675-c047-5dcb-8b59-bd27efbac04e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: askvenice-event.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'askvenice-event.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3749e1fd-e33f-54b8-9a9b-0c293607a5b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: askvenicerai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'askvenicerai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb7634b5-e3ad-50aa-b439-2a5dc2f191d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asmintofgevelgon.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asmintofgevelgon.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ab93e8-3c9e-5f8c-919b-69001bf6351f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asociacionbitcoin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asociacionbitcoin.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db4a68d-feeb-5ec5-aced-80d31d6debfc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asociacionmayab.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asociacionmayab.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8b63d-5d2f-5dde-bc3f-b1bfd6a732d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asolanaz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asolanaz.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a776efeb-a396-5ecd-a4a7-c3d0071e3b3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asomif.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asomif.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66b80908-0330-56d3-97ab-88ac7edea902","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asp90ksyuqlqsuilshzxoqwopg1ksayw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asp90ksyuqlqsuilshzxoqwopg1ksayw.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b83768-6274-5316-9daf-cbf62795785a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aspectareward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aspectareward.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c949da1-a6ba-531e-a4a1-44385a35768f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aspectarewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aspectarewards.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da8d002-3f53-5467-99e4-7869bd3b0b7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aspireapp-my.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aspireapp-my.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae03070-2eb5-53d1-9cb0-274cea57638c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assassinations.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assassinations.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a711e2-d12b-5494-98e9-3732f21c9564","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asscesdocuupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asscesdocuupdate.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc3297ab-0c5a-5f8e-bbc9-961be0235aca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assesement-claimsgov.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assesement-claimsgov.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83777f77-d7d7-5ea2-888c-efeb136795a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assesment-mygov.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assesment-mygov.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df13f45-ce99-5867-bb41-7f0b7605c2e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assess-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assess-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd53f6e3-3002-5eb7-bdde-074ec63782c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assess-centrelinkonline.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assess-centrelinkonline.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9c7415-c954-5a93-a323-d86712383494","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessingnab.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessingnab.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34105c04-bcb5-555d-9d17-40e1397abb2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessment-claim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessment-claim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8838f35a-0fae-54f0-a248-ed76a3eef972","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessment-notice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessment-notice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2050e730-96b8-5979-b438-2b47a393004c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessment0551.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessment0551.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6273d99a-7782-5e5a-947e-fdd3a9c0252a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessmentclaims.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessmentclaims.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9f38c0-9081-5265-806b-01d76437473b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessmentnoticepanel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessmentnoticepanel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c65a3f-6f8a-5840-8110-b17fa803a5f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assessnent-mygov.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assessnent-mygov.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0a8db0-2c40-5526-9420-bc9094cfb406","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assesssrnentnowlgn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assesssrnentnowlgn.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2193ba70-bc48-5de4-8565-a42262ed1aad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-arbitrum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-arbitrum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44188b8d-00fe-556c-94a5-12e92831c2fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-arbitrum.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-arbitrum.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e2fc4e2-d30b-537f-8ee4-a464c76bf0f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dbf52d3-06e1-5ab8-a49c-06b0c8d4d3bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-att.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-att.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b53e60-e923-5021-8723-c305197c5089","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47668bf2-d915-5760-8d75-73f50d117972","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08bd959e-6f13-59e6-affa-9afa50972e96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-eigenlayer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-eigenlayer.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55221a8d-d96e-59c6-8db7-6083469807ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-eigenlayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-eigenlayer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774eb213-ce76-5a65-a123-0eb84b0bc8a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-eigenlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-eigenlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4460b09-f91c-5e88-a063-a8797d92a77f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-lido.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-lido.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc97204-95de-5b09-a069-b7351b7c9c38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-lido.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-lido.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925a37d6-04cd-51ca-af42-ea1d8f256b39","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-lido.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-lido.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3b98b1a-d16e-5d5e-bdab-3cb28e0c3509","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-pendle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-pendle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f9f036-7757-55f5-8184-81822b3c8af1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-pendle.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-pendle.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69835402-f1ab-545b-bc66-1f93aeed71b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--726c23f1-a320-5c08-96b9-606952787baf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-protect-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-protect-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30630f60-304a-5ae7-81d8-83bed508c1ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-protection-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-protection-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc86d298-f935-502b-8b5c-d8732072bcb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-usualmoney.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-usualmoney.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8316115-5751-561d-987c-1de245802e66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asset-wormhole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asset-wormhole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0834b2-2dc4-5fb5-bfc5-b79157ebe3ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetloss-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetloss-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac8db22-a099-5913-813d-e1324c570a1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetmstr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetmstr.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1713587b-ad99-560f-8f5f-fe4968d74113","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetprotect-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetprotect-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3c05cb-b3e8-5c92-bf60-5052e9b61381","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetprotection-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetprotection-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cafdbf3c-2f14-5ed7-a4e4-748264568301","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetrona.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetrona.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a194c223-cd48-5dad-bdc1-a7a90b9268eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-arbitrum.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-arbitrum.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b774b51-dfc2-5bde-9968-1df2ca53f3e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-arbitrum.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-arbitrum.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca452fc-6665-5ce0-8bfc-439269b522cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-arbitrum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-arbitrum.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ed6837-c6b4-50bf-856a-a5f524a77d7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-cdn-amazon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-cdn-amazon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23fa7d86-d7f0-5bf5-9e12-dcbeb7fad240","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-degentokenbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-degentokenbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84617acd-db68-5b7c-90af-7ee89f0cc444","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-eigenlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-eigenlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe620d3-6640-5b21-8936-d75350d564ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-hyperliquid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-hyperliquid.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c294b3f-d03a-5e19-8816-408a38a2f404","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-hyperliquid.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-hyperliquid.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d0f2a3-dd82-5206-b1e9-5082684819d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-hyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-hyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afd43ac-fc6a-5814-9943-eb12d498c9f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-lido.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-lido.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b00ff0c-c3bb-5730-9d04-014db54127d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-lidofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-lidofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6beb14b-1117-5c35-93d0-edbd0ee08369","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-pendlefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-pendlefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0849e76d-754d-552e-a4e7-851c303634dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-symbiotlc.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-symbiotlc.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2fde5a-c662-5e3f-9929-909abc5f604f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-synergy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-synergy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc4784b0-5454-5f82-b81a-6c3b0195b816","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assets-wormhole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assets-wormhole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b4632-fec0-501c-8c05-66d382047a94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetsecurity-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetsecurity-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71f59da-5a65-56d4-a7fe-3374abead301","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetsprocurement.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetsprocurement.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74710531-6624-5707-8873-19a9efbfaa7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetssafepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetssafepay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e15184-0062-582c-ac39-f2b44c214913","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetssecurity-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetssecurity-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8030ec-fd47-586b-a8c0-650004428704","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assetsvault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assetsvault-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87170e9-8c76-5208-b76c-592e0a4b0f9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assign-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assign-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0c5c56-6f9a-5906-a016-c95762de5d8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-commbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-commbank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--319575ad-d0f7-5f7e-a0e9-9ac6738da9ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-gmail-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-gmail-help.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ce5a81-778b-5c4e-8b7d-5ebee2ea0725","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-help-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-help-service.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338f2af6-e3a6-54e9-a738-2157d2df85ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-poro.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-poro.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65610170-6dc3-505a-b824-ba2c55cb9a7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd3a592-1dd6-52f8-9a71-be7fb3573736","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017026f6-a6c2-500c-8188-cfe3bdcb4f1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assist-westpac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assist-westpac.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae49917-4d41-54ab-857d-eee279001e60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistagent-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistagent-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df61ff05-7baa-5f34-869a-e33b752499fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistance-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistance-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe58a39c-ae3e-5fc1-9367-914da3a66927","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistance-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistance-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cd7c1b-f939-5f09-bb76-d71fd272b1bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistance-nab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistance-nab.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff1ab51-5c60-5db4-bcdc-a48b71e8b683","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistance-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistance-uphold.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8f089b-4719-5aba-84ea-9ba4d99cd0d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistauscenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistauscenter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b1c898-7921-566d-816e-7292b79f8d43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistdesk-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistdesk-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef147b17-d52d-59c1-b48c-75ac6bbc1597","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistenciaconta.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistenciaconta.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--146ee227-44e2-59c2-9840-314eabd23113","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistfidelity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistfidelity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed3b30f-9dce-5d46-8192-edbf1a629353","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--492aafa3-fb1d-5747-ab97-f08f35b9728b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistnabcent.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistnabcent.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c983d7c-6f38-53a1-8b21-5baffca63e9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assistnewexchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assistnewexchange.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30cf394b-325b-50d5-a666-451676e629c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asslpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asslpay.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7956a1cc-e3da-5b05-bb44-9c530afa31b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assonsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assonsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5721e9e4-6ab1-5dff-9c5b-04cdba3403f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asssd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asssd.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1895c03-8099-558e-8528-007f856abd15","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assteriafi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assteriafi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45068252-42fb-5b24-b07f-91138ac97755","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assurance-servicerenouvellement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assurance-servicerenouvellement.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f8a26c-5a10-5767-81a7-e2390e4ae250","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assure-info-sms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assure-info-sms.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3234b0c-0782-5d47-86bf-2b889586d51d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: assuredpills.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'assuredpills.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c2ba31-259d-5a97-9d8a-8011ece1041d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ast68.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ast68.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6048e90-5701-5bb5-89e2-137d0954b3a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astaking.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astaking.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--624d0efb-6e54-548d-8d74-9c9e8d1bea6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astardesktopinstaller.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astardesktopinstaller.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305daa34-d5db-5837-a2ed-3dc5bd152e2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astarfoundation.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astarfoundation.bond']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--227ded7f-0fdc-5e70-9b51-71fe633a3d95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-airdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-airdrop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7d8ccb-0fef-5d1f-8ba1-65955de0d06b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-airdrop.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-airdrop.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d765b0a-a454-5d98-b3ef-b1281e96d1a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-airdrop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-airdrop.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e1666-b2b4-5739-bbb1-b21afbfce276","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2957cb2-6ab5-5a55-9ced-34cf4ae3b343","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-allocation.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-allocation.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30fa490d-99b7-5a8f-94bb-11f316b0175f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31873ef4-44aa-5a24-a70e-df2ef1c656ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5717e595-e604-5afe-8924-1e5723bc9852","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-dex.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-dex.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b256b9-21e1-5d04-9922-749b3edb9ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-foundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-foundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb7a36a-063f-508e-868e-3ce7dff6235f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-governance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-governance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46c7755-1da1-57be-9893-eb786d892c58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-vote.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-vote.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c2b0c3-3361-5d13-9ce4-671d2aca488d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster-voting.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-voting.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f00e3439-5da0-57e5-973a-52e015738019","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aster.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster.systems']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--020c27f1-a323-58b7-b1ae-f162ffb13ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteraxtrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteraxtrade.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83609384-a577-51fd-9c06-23a480418202","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteraxtrade.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteraxtrade.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec7d77e-9ba0-590e-82a1-d709de51fa2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterclaim.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterclaim.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b99ff767-91b9-57e0-80ab-ce5fb24fff44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterclaim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9e90746-27ef-5aa9-9956-9f7dfc5f3440","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astercor.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astercor.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--926a8380-928c-54aa-b29a-cf3a3466d1f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterczs-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterczs-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c303c7-04d4-56fd-820c-f1561ac39547","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdapp.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdapp.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa8a290a-0c34-569c-918d-f8edef004bd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdecks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdecks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3360b4ab-214f-5a91-85e7-979bb0f86e06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdecs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdecs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82da6556-10d5-54a9-908e-c12223e2905e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdefi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdefi.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe975bd-128b-5b96-928a-e3a498a90bb8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-airdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-airdrop.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b35774-0abf-5f12-a11a-a2964523eaea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa31e6a3-b3a0-5530-a492-60febc76a54f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-allocation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-allocation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113a7d51-0c5c-50d4-a62b-4ea461c6d626","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9a85b9-7e34-5ce5-a618-1885ac498a31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad0b491-9c2d-56d9-a81e-1b5c89b4a062","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-claim2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-claim2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1a542e-21b7-5fc9-b637-c22f4c3dc59a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-deposit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-deposit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c44bc53-153c-56e9-8910-66f82b449725","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-reclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-reclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0dc611-0cf5-56a6-8533-c5c720b2cc36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdex-teslnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdex-teslnet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08e88974-8843-5913-8462-2b049b5c5eea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdexairdrop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdexairdrop.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fd5c7b-02ab-559b-97f9-b425b221d33b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdexclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdexclaims.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba39372-3bb7-5f1b-9149-33619bd22d49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdexs-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdexs-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32cb4268-031a-50c6-a332-529f85f8b8fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterdrop.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterdrop.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb920803-b0ce-5ef7-af85-dceba36a2947","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterecoclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterecoclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fce873f-21ae-5db7-b465-dd6411e97ba7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterextrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterextrade.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd44d3dc-73fb-5039-a5bc-3b86b5e48f68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterextrade.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterextrade.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79f1dd81-2d92-552f-8f6d-21096259333c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteria-capital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteria-capital.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb09ac01-fc39-58b0-abf6-2ba8bc86a3cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteriasbiotherapeutics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteriasbiotherapeutics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e442d31e-4f00-58b4-ac7a-4de709e3327a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroid-drop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroid-drop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67852f76-5238-51a1-b671-b77295cfbcca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidcoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidcoin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be425a7-9ce5-580d-9409-dfb2d5676182","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroideth.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroideth.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1bd77a-2055-5efb-a06a-48c2250cfd56","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidog.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidog.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bceceffe-a6f2-5615-a93c-4be0919157ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidog.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidog.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80100fc3-70bd-5c3f-8337-b62610c80c38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidrh.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidrh.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4819e35-c917-59b6-b2a5-326066c00cb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidshiba-erc.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidshiba-erc.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b71b91-6bef-5cfb-b0dc-eb944404ad9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidshiba-erc20.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidshiba-erc20.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c14aa583-de2c-554b-883e-11c40c497689","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroidsol.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroidsol.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d8e5005-2780-51c4-8040-7b4aecfe489b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteroshib.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteroshib.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6028727-e3b6-5c3c-84f7-4bcc40265abb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterrewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterrewards.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30b474d5-8219-57f0-b969-46c8764c872b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterrewards.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterrewards.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19de7830-4d60-589f-91bf-08e9eb7f27fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asters-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asters-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a46f94d-99ac-5c61-84ed-bfb0d70e1b7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asters-votes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asters-votes.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d423525e-edde-56e1-ba64-cfb1797db7a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterscz-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterscz-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ef63b7-8082-5498-94c3-b80f79848476","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterscz-allocationed.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterscz-allocationed.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--973cd4af-7545-5364-a345-2e416cde6de7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterscz-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterscz-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a12d508-b9be-583f-9dc6-5ab73c9052c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asterscz-allocationz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asterscz-allocationz.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6878b46-04be-5c24-83b2-739c5e5dfaa9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astersdex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astersdex.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03087b18-d968-587b-9d26-6ce167ee4bd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astersol-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astersol-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11bbca58-a7e1-5976-b3cc-ab46f4f358fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astersverify.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astersverify.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e787f00b-fb1a-5b7e-b892-b0a1076b1de0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astertoken.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astertoken.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59da923d-a67c-5974-9438-60e046d28686","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astesrdex.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astesrdex.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d98a8ca6-3f89-552e-927f-dce09e7c96bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c1a95ba-a742-5b41-948c-828d60f2e3d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asteth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asteth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a4ba63d-be15-5eac-b13f-e1777951b520","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astracardealerlot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astracardealerlot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c3f6458-02e0-5bcd-a66b-d9fb371a3a20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astral-searcher.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astral-searcher.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca4647f-7093-5b8f-bece-b89c03f97c55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astrdapp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astrdapp.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--083accde-00a3-5a49-8d72-a8a2ecd12edc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astredex.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astredex.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d1d0a1-d508-5769-ab41-07db7b812730","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astrofinancesltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astrofinancesltd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36f310f-3a61-57d7-9c7b-3710ffd4a9e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astrometriknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astrometriknet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef9618a-abd0-518c-b757-fa54247a3452","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautgame.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautgame.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2beaf9-b7d5-578a-b7cf-717062fa5bab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautgamers.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautgamers.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5b4696d-820f-5c59-881a-bda77cfe4344","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautindia.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautindia.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28969e76-ad42-5740-b4bb-3cd8921d75c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautindian.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautindian.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6874898f-8c9c-5e6f-acfc-03d4d02816e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautslot.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautslot.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--084f2e8c-3ec7-5b02-b8ab-0043cd1595b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronautt.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronautt.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc784517-1551-57cb-a3ab-e872421a9b81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astronomikdusuncelervesanat.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astronomikdusuncelervesanat.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a7ef8a-a41b-599f-8867-d186f1fffdc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astropepe.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astropepe.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd58b81-545d-57e5-a085-5f211e61489b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astrovault.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astrovault.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b31b768-00aa-5b10-a6c4-63cf762bcb9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astserdex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astserdex.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4055d51-43f9-5040-a7a0-e5da0ccc329c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astshiba.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astshiba.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f4fdfd-2269-58a4-b312-88ebf59a5596","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: astupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925af624-cc67-5900-bdb5-601fc0265ca2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asuredefi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asuredefi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dca6fe7-8af3-5772-9939-70bd9895c226","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asvrdf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asvrdf.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4063a74f-8939-539b-9fc8-b6131535c947","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asy-attacker.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asy-attacker.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d6d9f8-af48-5c14-8f93-a6697031a667","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asyabahis2116.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asyabahis2116.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eca756a-f353-50d0-b768-ac3829191f1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asyabahis2122.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asyabahis2122.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a0571c-bacd-5283-a1bd-6fbe6f870cd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asyabahisuyelik.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asyabahisuyelik.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a2d7dd3-cdc0-55a9-ba88-15333b253ae5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asymmetrypool.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asymmetrypool.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--787a9158-2f0f-5c1c-baa0-677ec2195e8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: asys-attack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asys-attack.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73c984b-48bb-52b8-a37b-914619daaa1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-bybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-bybit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd1df58-fdef-5fa9-9a3e-d4fd82ed1610","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra18.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra18.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a22f6083-1bc9-5015-8a44-3fb508feda28","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra19.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra19.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170eafd5-e4ce-556d-92fd-1394de1c9bd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra20.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra20.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17902c98-515e-509e-98f2-1f6e85782733","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra26-cc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra26-cc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774bca18-f3d2-5f7d-9bb8-4ab6766ef4a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra27.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra27.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c67216-545c-5d40-ad52-07015becde2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra29.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra29.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b9c74f-35d7-54bd-9d8a-b9f3febb5e84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra30.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra30.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6756d52-0102-5096-8bd2-08ee40dbde48","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra34.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra34.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14c51dc3-5aaa-50d9-a18c-a4831ad23079","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra35.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra35.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52f48e9-092e-57e3-9392-81c652ad6827","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra36.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra36.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd46f2c-6eb1-5647-941e-c5b644719f5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra38.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra38.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7940fe39-904a-5b5e-9b16-dab1c0bb8253","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra39.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra39.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0932ff-798a-50ee-ae4e-711e2b416540","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra50.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra50.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--863d3d61-bdf3-528a-a1cf-c36e984832ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra53.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra53.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f295a053-a404-5908-8c8a-b6351e159047","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra55.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra55.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc901fd1-d3d1-5b5b-a59a-ae777200acff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kra57.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kra57.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c3985dd-2249-5425-9f99-3dc53d05774a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-krab7.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-krab7.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e886aac-3946-50a9-91a3-94db941afb7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-krab9.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-krab9.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b295b65-526c-5d06-9345-0602a7a6626c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e005066c-a6d6-56d1-a42a-50c0c1e88c9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--763fe8c3-eee2-50e1-8996-f5e462cf01c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-slon1--cc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-slon1--cc.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b88361-104b-5eac-92b2-566096bd6e5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-slon3.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-slon3.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1575ea74-955f-56a1-a7bb-af0dced22f87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at-slon4.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-slon4.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82199fb8-a042-535e-979f-8ab964dff242","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at0micwa11et.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at0micwa11et.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--019d6e26-c6a2-5a14-aa7b-cad476e475f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: at0mygovau.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at0mygovau.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe5675a-f9c0-512a-8f6e-353981e21519","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ata24.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ata24.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d4bb28-0916-53c3-8603-2c7bf4375b4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atcwebwise.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atcwebwise.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf970d2-2d6c-5be9-8102-130caf060e6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atd84.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atd84.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f81ebe-b8d6-577e-9fcd-6e521ed3c633","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atec.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e4c4b45-b4ca-5cd7-a8e7-d2e93db837c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atehir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atehir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d609df-79a8-5da7-b861-e54ce931363f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atelierjurissite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atelierjurissite.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--142c3fce-8ba9-5e4d-ac38-116299932380","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atencaoclientesantandernet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atencaoclientesantandernet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc41f74c-d270-55da-ac3c-38359c86e68e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atencaoclientesantanderpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atencaoclientesantanderpt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75fb3ab0-6b03-5f66-a019-3c9d52e8f9d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimento-24hrs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimento-24hrs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2269e3-3068-570b-97a6-9e2c7362789c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimento-up.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimento-up.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e040ec78-fae0-52c3-b494-5e1ecf547f34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimentobanco.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimentobanco.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebcdc45-2204-5bb6-8e3b-c5cd14893e7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimentoclientepj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimentoclientepj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db3121d6-9cc0-53e2-8cbb-8bd425c723ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimentodigitalsantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimentodigitalsantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--141a1b81-05cd-5611-a39d-76c63d892c21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimentoimediatosantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimentoimediatosantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--181bbcc6-197e-530c-b0a6-101d67d228ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atendimentoonlineauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atendimentoonlineauto.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a23087d6-da6e-5d87-bd07-8273e524d7d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aterstalla-skatten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aterstalla-skatten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a52552c-ad14-5966-ba78-794916de3fe2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atesinc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atesinc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07490200-f1f4-5756-a276-fd4c76ecaa14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athcldrewards.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athcldrewards.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77996506-9367-582a-ae16-b0252df2c42e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athenianslabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athenianslabs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c800f7-a302-58bf-8a44-afbebf3f0c38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticforum.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticforum.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddb1906-d103-5b6b-a81b-3efb1c2d4143","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticforum.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticforum.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37367d8-fd08-5da1-9bcd-3c8eb5da9e0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticpharma.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticpharma.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2e0f6d-c273-5bca-9cea-4bd37df809d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticpharma.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticpharma.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d94ad51d-496f-525a-8d26-669640bfeba6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticpharma.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticpharma.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c63b4ac7-ab4d-54c4-913e-f833b145c98e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: athleticpharma.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'athleticpharma.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a9801a6-baf0-5bf6-a937-d822ec184e30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ativarlogistica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ativarlogistica.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91503815-0323-5887-90b7-d81908ba1edd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atividadedigitalapoiosantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atividadedigitalapoiosantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cef94a1-d616-5619-b401-7e64190c576c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atividadedigitalsantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atividadedigitalsantander.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9cb3f0a-7122-5bc5-8ed9-c71d1bb251b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlantabuildingefficiency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlantabuildingefficiency.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a8af80-618e-5ed8-ae23-6d7cf05f2e10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlantic-banking.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlantic-banking.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a152d69b-bd9a-5a5e-84de-a8dacb67fb6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlantic-meds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlantic-meds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12e6b41-abde-5746-850d-07a1791000a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlanticcitycasinope.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlanticcitycasinope.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f0cd429-90f9-5c8d-bf58-fd318e1cd6e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlanticrx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlanticrx.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb8b5f1-272e-5b77-b7b9-b13df3b49ac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlanticspins-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlanticspins-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4586a3b3-578e-5e01-994d-983cc6f17636","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlanticspinss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlanticspinss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700f7810-7f97-5ea3-8525-5f6265af2578","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlanticsspins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlanticsspins.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acff7468-f7e4-589a-85e2-dcbc3bff8753","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlantrix-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlantrix-trust.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac1f762-b0d4-5cb5-865b-891e8cb4cf4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlas-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlas-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff47d175-8e23-54ed-b36b-79c1b48fc2bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbet-canli.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbet-canli.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--328ddff3-6257-53dc-923c-d4e13bbf2653","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbet-firsatli-siteler.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbet-firsatli-siteler.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51834719-ecde-5d39-9dfe-0b5784edd926","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbet-resmiiadresii.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbet-resmiiadresii.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85fe427b-be0a-5758-a40c-b51416ffb95b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbet1882.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbet1882.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--013de893-ea7e-5110-8068-53d25a30e1c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbetburadan.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbetburadan.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfc41c7-89eb-59d7-a7e3-a1854a9730eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasbetkapisi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasbetkapisi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f860fd-4c7c-5051-b2e4-059402da60d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasfitnessdc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasfitnessdc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126c3a19-131e-5fbb-8376-6c93a43b8c75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlasgloballtd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlasgloballtd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c205529b-ef66-5fc6-a6a1-5d875675b6b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlashyper.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlashyper.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--902b01c2-7b6c-5a90-83b2-01e50383dd97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlaslabssteroids.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlaslabssteroids.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c098e6c9-354b-52f1-bd76-2fc5a0c15a70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atlastradingproltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atlastradingproltd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcfaf9f7-2574-58d7-b777-f0f1f66edd3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atleticogpt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atleticogpt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ae8a970-9d45-5bdc-bd69-20e6c6f3f0cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atm-xupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atm-xupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f572b8d-ec32-50e1-92c5-04585909bb8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmautstrasse.autos","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmautstrasse.autos']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b457e5-5cef-51ef-b56b-6d900c858175","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmautstrasse.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmautstrasse.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151aba7a-48c9-536a-af8a-a188bb92178c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmbahis-plussadresler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmbahis-plussadresler.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7edf0662-060c-548a-ab34-516582ae1a26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmospheredast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmospheredast.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c424c7-8e66-5428-bce6-2332c7319f20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmxrpl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmxrpl.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9a12a3-c97c-5606-a10d-b788143ed0cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atmygov.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atmygov.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eddc7e1-bff7-5932-ab4b-90fbe2f32996","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato-evaluation.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato-evaluation.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04d650fd-e154-531b-8a55-b6d0f49096b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada5f2a4-f10e-5cd2-916d-5d554b7757c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato-mygov.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato-mygov.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df4f13fe-e930-5279-977b-d33d926c45fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato-mygovau.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato-mygovau.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc4552f-8afb-5986-b7a3-4d365bc1c0a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato2025statemnetshelp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato2025statemnetshelp.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07697044-3fd4-59f4-abea-6772b044764b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ato2026cebnsternzmzbhsztb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ato2026cebnsternzmzbhsztb.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--310d0996-d74f-5490-95b3-3c3774789869","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atoaumygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atoaumygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2e3aab7-aa23-55be-8cbf-75c0867d3e14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atoaustaxtime.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atoaustaxtime.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7121345d-50a6-596d-8fd1-e89cd3be281d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atocalculation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atocalculation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4557b5-da29-5a06-84d9-1c781e655d3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atoclaimsteamaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atoclaimsteamaccess.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab138927-cffe-5966-aa7e-012332a9a95e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atoconnect-revise.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atoconnect-revise.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12821fb-1e92-55d1-b40e-2548de88f0e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atogovau-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atogovau-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed89f355-b1b2-5f64-91b6-c1f69ccd8067","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atogovonline-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atogovonline-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce7e947-884b-5f40-a82f-5cc51d531a65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atogovonlineservice-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atogovonlineservice-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--689786c0-91d7-5a42-89c9-c0953ab4361f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atogovservice-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atogovservice-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5cdcdf-5d68-5cee-8a60-e44b213e5130","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atogovservices-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atogovservices-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20af447-7ac3-50f0-abca-865010712c5c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atohomemygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atohomemygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5028103f-b01e-51f8-b570-2ddc8a24add1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atointeract.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atointeract.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd68c177-9c5e-50b1-9e2f-d2c44867cb0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atom1c-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atom1c-web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8987e861-b6cd-5320-ae70-093ebcf75204","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomic-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomic-web3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01acf7cf-c6ed-5c48-a6df-709d5cc13410","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomic-web3app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomic-web3app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3a8bf5d-28f5-5a01-bdb1-e206c781e2a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomic-web3s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomic-web3s.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e593d59-f1d8-599d-8ae5-ee61a16317bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomic-web3x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomic-web3x.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1371e31a-cf80-5b83-84d3-8c9936c2da0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomicdesktopinstaller.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomicdesktopinstaller.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--463d0880-e03c-5733-8cef-df9239def67e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomicwalletweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomicwalletweb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--140c1b56-2e35-5cec-926a-29fc49ed73e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomicweb.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomicweb.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5443ebc-117a-57a7-a1c2-e210c350bb88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomicweb.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomicweb.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a1a08b-3962-583c-b237-14524f116bf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomik-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomik-web3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0d5760-2e67-5a3f-a902-631cf211ba44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomik-web3s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomik-web3s.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1805afe1-5c8e-5a7f-b482-b3fe76a7dac1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atomygovhome.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atomygovhome.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf658be1-0c29-50ba-97f3-5bb0d9abfcf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atorecordupdate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atorecordupdate.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87059707-afcb-5b3c-9396-900e392cc194","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atorymail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atorymail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4251a0fb-8c25-5c91-b992-699113f6d0ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atotaro.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atotaro.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc02435-d147-5840-8ec3-e953d28ac898","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atrblocks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atrblocks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8bb591-2d5c-586c-86d3-8337d157705d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atriston.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atriston.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--324559ab-7b2f-502c-8957-eb263bac17d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atriumconcept.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atriumconcept.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--158b2fba-2e57-5a14-b262-04a8cfc1b681","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atriurn.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atriurn.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d688905-f3f0-5f7a-91e0-0067010929e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atseft-onlineassessment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atseft-onlineassessment.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d45ac19-ad9d-5394-a75e-388aa5091f95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atsiteos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atsiteos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1a7574-2469-5167-9f97-9c52779ba79e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: att-dashboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'att-dashboard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e98477-a1bb-57e4-9688-16697e82eab1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: att-mobile-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'att-mobile-auth.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca142021-b540-549d-a691-3cff62dec9ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: att-secure-carrier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'att-secure-carrier.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd391058-d851-5b65-af46-bf29e26f7b62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: att-servicedesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'att-servicedesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3caf5a39-5933-536c-8c76-3231babf3388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: att-watchlist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'att-watchlist.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f70622d-ec42-53a4-80fc-91ec8be67cf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attached-myaccounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attached-myaccounts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1ccb370-b961-5287-9d32-fcd77013f1e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attached-noreply-accounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attached-noreply-accounts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb7716f-6b1f-573f-9123-0799d183c7f5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attached-noreply-myaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attached-noreply-myaccount.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12814386-0ae2-5304-85de-22badcffd8b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attached-noreply-myaccounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attached-noreply-myaccounts.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b75fde52-2c08-5bb8-ba3c-9eacae4f45af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attacheddocuments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attacheddocuments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e770bda-cf78-5a7a-a3a0-ba19428b1dd5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attemporibus.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attemporibus.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ee89d9-5d40-51b7-9396-5179fd49012c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attempt-failed-reschedule-gb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attempt-failed-reschedule-gb.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a45e6d0b-f28e-561f-870b-b5e7856e3fbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attende-december.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attende-december.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--204307f5-cf5e-565f-841f-63417a11f286","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attendee026.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attendee026.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f9e55-c478-5fee-9a8f-63e53b66d4f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attention-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attention-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ab8037-b110-5c95-a2d3-e071bce5a116","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attentionreports.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attentionreports.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0ddabf-bcc6-5ae4-8391-f98f609aefa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attentionreview.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attentionreview.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739951e4-342c-5f5f-bb72-fbc9227187fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attentionsec.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attentionsec.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc6fae5-d1a3-58b0-9627-85d2d3e31e02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestable-assetpool.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestable-assetpool.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81adf6ce-5f71-5aff-ac88-de750ed20f3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestable-keybox.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestable-keybox.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c1f8e9-5c42-5f64-8d89-0d466621b744","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestable-network.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestable-network.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6eac89-ae6f-56fa-92c6-c9cbcf3bc3a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestablehub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestablehub.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0397f6c-a92d-5eb0-9dcb-d2aac436f75f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestableportal.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestableportal.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fec2ed5-b2cc-57f0-8582-9a6f6f1d4a47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestablescreener-shield.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestablescreener-shield.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4f17fe0-9afa-55cb-9cba-82d7a43fe778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestation-droit-maladie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestation-droit-maladie.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6009cfe4-5577-5329-ac26-0a02b23478fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attestinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attestinvest.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f468369-f702-5ead-bc31-9a84bb852bcf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attica-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attica-login.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc646fc7-d671-5b96-889c-6f44b6c8cd45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attila-atac.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attila-atac.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77677de4-fa9a-5d22-be46-24d763f77d7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attlasbetadresniz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attlasbetadresniz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74eae64-d29e-52bc-8547-05ed15d49012","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attnpulsecuc-signs.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attnpulsecuc-signs.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f577cff3-496f-5ee0-af9a-50e275216fbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attorney-cyprus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attorney-cyprus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a4684d-b203-5ed3-aa06-ed7aeda5d629","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attorney-cyprus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attorney-cyprus.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7018af5-694c-59fa-8d77-44e263ef1d33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attorney-cyprus.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attorney-cyprus.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--919c60c3-1d74-5a31-b84e-fe8c8d7135d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attorneyheadhuntersmiami.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attorneyheadhuntersmiami.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2d4a02-96e5-5104-9190-9b65818fe408","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attorneys-international.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attorneys-international.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a19e12-4082-5c47-ac9d-5d4ebb3de83b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: attractive-puggle.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'attractive-puggle.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2958bfc5-d3f5-5653-aecc-d17f4d441ba8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaoacessopj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaoacessopj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88abaeb7-fb5c-5e1b-a45c-7b2c7bdba06c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaocadastropj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaocadastropj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6242e370-33a2-50eb-939e-254fec5c804b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaodeconta.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaodeconta.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0659cf87-2234-531f-a933-42cb73cce28d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaodeusuario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaodeusuario.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1d15fa-818b-5621-a389-b74df4b022ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaoempresarial.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaoempresarial.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e425e7-db7b-5e9a-a862-0529de8933ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaoperiodicapj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaoperiodicapj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d78d41ae-5c56-5c28-8cfd-f4c31d87bc9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaopjs.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaopjs.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e38bae-d713-57a3-a5e2-2bad538b97c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizacaousuario.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizacaousuario.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce001e3-ae72-5c7f-9968-98a21d63faad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizameuperfil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizameuperfil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447b287f-7dd2-52d5-9a89-46a94d7fd4fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizar-cgd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizar-cgd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7becd38e-e188-5eee-91f9-e0aea4e50564","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizaracessopj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizaracessopj.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a21b4d-266c-5438-968e-1b8091dd11cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizaracessos.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizaracessos.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3592dc-c9c0-5ff4-83d0-6707d0cf4840","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarcadastropj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarcadastropj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd35d646-f321-5b2d-87d3-d1f9df10bf2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarcredenciaispj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarcredenciaispj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f823f2-2867-5370-8c84-c10ed53a5999","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarempresa.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarempresa.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80a0ba8-a5b5-5e1f-94cd-550eec3b8bf3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizartoken.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizartoken.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf1a11d-cd9c-5b70-8c08-bc1e2b810bf1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarusuario.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarusuario.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--271cbaac-5057-5916-9620-95b936f2971d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarusuariopj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarusuariopj.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4679e945-fbd0-5ca7-b9fa-e6a9b2ad660a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atualizarusuariopj.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atualizarusuariopj.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66f925f-eefb-51a1-891a-144a4fdeeea6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: atyourservice-verizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atyourservice-verizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ceaa776-f52f-55e1-be5e-29dad8209345","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-activity-2025mygov.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-activity-2025mygov.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9be4846-2513-56e6-bcb8-8bda8473a1b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-allyspincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-allyspincasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--391b5426-f4b2-58e0-a645-3d6d3c36f373","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-amunracasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-amunracasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b1cab3-8f82-53bb-a161-9943f153eba4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-anz-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-anz-web.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ab45b5-b320-5993-a173-29415e114fa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-astromaniacasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-astromaniacasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5e9329-712b-5dbf-b2fb-0a0abd2615c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-aunthlodgement.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-aunthlodgement.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce028260-e9c8-55a2-85dd-aa2e2488ab82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-avengerscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-avengerscasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e073612-9063-5390-b205-451af57e973c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-betalicecasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-betalicecasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cdebf37-971b-5621-b420-7792d1e04105","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-binance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-binance.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d5c81f7-4a63-56fc-a96f-c5a0ce049c7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-bybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-bybit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c91d667-2469-56a4-b0f5-b3551269307f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-centrelinkservice.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-centrelinkservice.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ea53f2-76cd-5cce-8506-06d0888d4e2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-claims-services.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-claims-services.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbbb2131-8d6b-5f95-9a84-d5ec676c68d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-coinbase-privacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-coinbase-privacy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aab3326-23e0-5626-8413-04ad66e80dae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-coinbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-coinbase.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d1ed5f-e625-5682-bf93-5d3e8c196d12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-fairgocasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-fairgocasino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e487b59-57e7-5be1-9f0f-b3f15ef4388f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-godofwinscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-godofwinscasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec55ebb-513d-5856-aa8e-3a770e0e7e7d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-goldwincasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-goldwincasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d840ed0a-d878-501f-9fa1-5e2fec66a8e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-gov-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-gov-info.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2928c9d-f1fe-59df-9f50-c827586b8c22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-grandrushcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-grandrushcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1d0a24-312a-533f-8b53-04fcab7dfec2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-heapsofwinscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-heapsofwinscasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25da7ad7-76d7-5398-b831-4dd5dbba2764","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-jokaroomcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-jokaroomcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c2ad24-9840-5e13-a8ae-c7e4d0d68374","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43374dc-c567-5e1e-b640-75af1859c25f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-metamask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f163c84a-c0c6-57f5-96df-05a690a9851e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-myservice-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-myservice-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2022c3-422e-5625-b442-03599a880857","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-nab-customer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-nab-customer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acb53dc-6a95-53f0-877d-edd42b6aab70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-neospin-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-neospin-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a070c68-13c1-5138-80bd-a7580f78ccca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-neospin-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-neospin-casino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c195d13-993b-5b81-b693-e841659e97d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-onlineato-servicesinfo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-onlineato-servicesinfo.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7f5702-697f-58ab-8a31-a3275d56cf3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-ricky-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-ricky-casino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a44fc2-c9a2-5d6b-8a8a-1f24007a3278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-safepal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-safepal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8acd82b7-cede-592e-b883-73352c4247d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-serviceatocentre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-serviceatocentre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ac4be3-0692-58d3-bd42-31cd3a55e606","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-sign-inmessage.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-sign-inmessage.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aabc64f1-442e-5602-a13c-1b1e743dda45","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: au-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'au-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ea4510-0024-5264-b781-12b805195322","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aubeluxavor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aubeluxavor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ba07b2-1078-5326-8371-319ac41186ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auboss-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auboss-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f00378-a484-551e-9f46-abad0409b489","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aucentre-manageclaim.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aucentre-manageclaim.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73049b9-f7d8-50e1-bfa0-889e5d14c084","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aucentrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aucentrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ae5eaa-a402-5323-8534-e23e5eb43ebf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aucentrelisieserver-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aucentrelisieserver-au.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d066f-7867-5eb1-a53d-c0cb502398f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auclaimdesk.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auclaimdesk.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65cd9c6-95df-57fb-a470-3eee36a818b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auclaimonline.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auclaimonline.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb1b9ce-dd25-5ecc-8abc-e62b8b664018","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auclaimsfundingsummary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auclaimsfundingsummary.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e654c9-1551-5a08-95af-75ac578d1a2f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auclaimsfundsummary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auclaimsfundsummary.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff59540-ae97-5267-be81-7e96d3d29e7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auclaimstatus.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auclaimstatus.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9506def6-2be7-5bfe-bb19-a73f05696335","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aucntveri-at.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aucntveri-at.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0091f51-10f0-522c-91bd-39607c93004a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auctdedn-wtah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auctdedn-wtah.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87931fac-c2ee-5c80-841f-f6d759c1d81d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auction-zkp.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auction-zkp.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae07f39-b647-53f1-b9a6-24a5633d5616","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auctiones.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auctiones.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac73801-45eb-58d5-8d66-1eecc4c62ff2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auctiontechnologygroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auctiontechnologygroups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c138d8-f548-5d17-9dc3-89ae8bc61a0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auctlon-zama.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auctlon-zama.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b207025-76a0-5901-a371-834aeb103847","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aud-centrelink-advance.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aud-centrelink-advance.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--761f847e-18f0-52a9-b446-ec24d6e4d7e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audazmercovia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audazmercovia.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d74682-6dfd-5d5d-98dd-bfad6fe74dba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audclaim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audclaim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--251ebd20-8ae9-5d04-b47d-f93bc3ac93c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audefi.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audefi.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ab24268-d4d9-563d-9305-7342081e8da4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audeotherapy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audeotherapy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1963bfa-927b-5578-8b8c-faaf63557bd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audera.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audera.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db2075f4-12a7-5c82-85ab-b9ee20aca66d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audia6.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audia6.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87cb8992-9dc0-5dfa-a6b7-b9669fc0c32a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audiencebehaviorinsights.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audiencebehaviorinsights.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd91902-6ca1-59ad-b89e-3632db6f8f9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audierareward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audierareward.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58b0b11-421d-5c7c-a7d8-bca48ff51484","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audio-channel.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audio-channel.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1efdb52-7e45-5566-b4c2-0da958f84386","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audio-compliance.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audio-compliance.media']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b1c673-da86-519e-b6bf-cd633e98351c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audio-driver-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audio-driver-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985b8c9e-470f-5208-879f-619d95990873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audio-find.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audio-find.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f2e4e0-592e-56f2-830e-410634cbb48f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audioclub.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audioclub.store']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb311afe-be1a-518b-b15f-fae18a28bf1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audirect-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audirect-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed1de903-b9f6-5998-b223-b2663d0a07e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audirect-claim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audirect-claim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19f9b63-ce74-54b8-a30e-ab70f1ba0812","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-apple.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-apple.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f80a2c4-4604-5928-9f49-7f355f06e7d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd89eca-1d01-5160-8623-b3f93828c653","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e990c0a1-1cae-53d8-8355-9e9ae68e7481","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90765c0d-76ab-5fa1-9b0b-b9344706f4f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-usdt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-usdt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a45fb6-87bf-570a-9685-fcf9dc95a2c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audit-usdt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audit-usdt.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8524993-61a8-59d8-b77e-b6fa9d5975c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auditable-watchtower-base.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auditable-watchtower-base.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--056803aa-e534-5178-88ee-c969265cae13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auditoriachequeempresarial.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auditoriachequeempresarial.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ab8fd6-1bd5-5312-8c6a-bff819f0421b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audittrustwallet.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audittrustwallet.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81188b2-2f12-5317-87e6-71a65487cbd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audius-rewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audius-rewards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f745ab-2e3d-5190-9b74-3c5ac5357a89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: audnabserviceforum.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'audnabserviceforum.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66392834-77c6-51ee-abf0-ff321db0d526","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: augovce.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'augovce.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01272155-f00f-5e8e-8ce2-50d1ff8937c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: augovservice-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'augovservice-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3d0888-f023-5b44-b217-1c3360d53929","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aulc90.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aulc90.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef0ec77-509d-560a-9c20-110cb6c5684c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aunobit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aunobit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--170576e7-7fc9-5428-a1a6-81d79c2ac63c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auo-24.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auo-24.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5f16d7-cf9d-5c80-b89f-1bfceab54025","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auo24.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auo24.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c74f500-fac8-5a0e-8fa0-7b6686793f01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auonlineato.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auonlineato.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--591286de-d346-577a-bdfc-b1e066287766","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aupromptupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aupromptupdate.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35988fe9-0ebe-5c7b-bd53-2949cc214120","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aura-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aura-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095c3ced-43b5-5c48-aa5c-3f72eaeeda38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aura-home.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aura-home.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e6c5ab-90ac-5677-bb18-f0faa328f896","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aura-v1.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aura-v1.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c63bcab3-bf5e-5838-a600-a9fcd7e95c75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auracoinsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auracoinsolana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61adcb4b-c21a-5d2a-a4cf-82e2a0f667e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auramaxxing.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auramaxxing.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3139dad-da94-5b8a-b014-b5ab155fa43a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurametric-btc960-ai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurametric-btc960-ai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--171d7cda-546e-5611-abd1-830064393756","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auraplaycasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auraplaycasino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db0523e-15b9-5d91-a082-d23c56bcf4b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auraxalvera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auraxalvera.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff8fc08-5554-5931-a075-b0ec5e67d22b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auredirectservice-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auredirectservice-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e6ef87-7772-55dc-b979-d78db7a262e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurelineagency.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurelineagency.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--653a5334-4894-518b-9575-1965290f730c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aureliusai.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aureliusai.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e7ae441-80ee-58c9-8c98-971bbe96cacc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aureofundoria-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aureofundoria-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3a317b-477d-54f2-aaa8-ea947eece3ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aureumcapital.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aureumcapital.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35db25bd-055b-5070-a6b4-b627da3f2bcc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurevia-capital-gpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurevia-capital-gpt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f30cb19-d5c6-56ec-bab9-0cf3289a994f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aureviacapitalai.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aureviacapitalai.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3590e7b4-741a-5acf-b53d-242dae205538","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aureviatradex-ai-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aureviatradex-ai-fr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4f99fd-2c06-54c7-8f19-451df6b40cb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurevoirmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurevoirmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92586b19-a3d0-5b24-b57f-c012ae8a1ca7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurexcapital-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurexcapital-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1da1f7c-22c2-542a-b440-d987d955d707","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auriclendmere.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auriclendmere.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c22695-e3a8-5da6-a264-fef9c1d2b7e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auriliovaltrion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auriliovaltrion.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bd5374-b068-5c16-9139-3c36d7fcac13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurion.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurion.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a9f112-121f-5448-b6f9-de4558d4e985","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auriveo-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auriveo-finance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea383b81-2645-5575-b297-b873f6aa0a3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurix-ai-it.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurix-ai-it.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b7e56b-1d4b-59e1-a708-479359e99a14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurix-ai.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurix-ai.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91cb782-529a-5a77-8fdf-694a5af487f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurixa-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurixa-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b491e23b-9a49-50bd-980e-28ab04c3a0f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurixplatform.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurixplatform.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41cdfc92-b75a-5a7b-a025-c06680cd7d14","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auronixpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auronixpro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9717db77-e831-52fa-99a0-7a9b27774951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurora-fm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurora-fm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8586ff-76a8-5997-ae14-72ef0335abc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurora-nuinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurora-nuinvest.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29a8855e-82a5-501f-bc8b-aaf637d90d0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auroracoopalimentos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auroracoopalimentos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab937d76-701a-592f-aee4-1e04c6a5c7ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurorafield.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurorafield.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d973c9-4759-50c5-8908-3f5e3f074655","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurorarewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurorarewards.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9898e5-001a-5268-95e0-d631bc95b8dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurorastocks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurorastocks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01f6074-9d69-55ed-8432-9ec4f087b49d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurvenixt-de.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurvenixt-de.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa09faa5-1497-5411-afa2-607c087377c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurvenixt-es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurvenixt-es.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb343b9-5e9e-559e-a7fb-5e83092bd94f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurvenixt-it.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurvenixt-it.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fa0d862-5a7d-529c-b7aa-3e07d8f4c7fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurvenixt-nl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurvenixt-nl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1090cd7-7365-556a-b2f6-e7bee7278fe2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aurvenixt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurvenixt.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c20ae34-e3ec-5cb8-8f6c-2f039ea8cafd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-centreaccess.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-centreaccess.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--290520a2-03c8-59d5-8be6-179e905a4c23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-centrelinknotice.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-centrelinknotice.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043926f7-32aa-5425-9326-6db96c11e219","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-directboards.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-directboards.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b91d0c-b201-55c7-b723-471bc64b8341","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--712dcf6b-18e9-5559-be8c-aeae0743324b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-metamask.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-metamask.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e818db6f-61db-5a77-8318-bbc5b430d4a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-sumanrydas.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-sumanrydas.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46085ed7-cde7-599b-b572-2968ebb90651","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aus-sumanyrnas.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aus-sumanyrnas.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a234b386-01f7-5d73-b4cb-f4468fc3d062","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausanabolic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausanabolic.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f936190-d261-5bac-8b91-fc62a5cae7f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausbinance-security.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausbinance-security.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4e8b4c-83b5-5f20-90b4-7bc7b3030685","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausbizzocasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausbizzocasino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40557a4-5b9e-5942-9775-a179a5b345b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausdashsummary-lasback.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausdashsummary-lasback.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed73f421-e762-5186-b3e1-1c48e3a56eb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausenonline-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausenonline-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cb838d-3ea5-558a-bc5e-6c07094944f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auservice-advance2025.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auservice-advance2025.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37026d7-b4be-5856-a8e0-30f0f1c03aa1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auservicegov-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auservicegov-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47866cd6-7e96-5904-aed4-4037994c8a70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auservices-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auservices-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5219363-3980-563a-ae01-4afffcd25ab1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausgov-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausgov-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f330249a-6b9d-5043-b5bf-c421dc6cccb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausgovonline-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausgovonline-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da61b051-a96b-5599-84b0-0d770d8b5b11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausinluck.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausinluck.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3059b040-978b-571d-a884-d1bd5a0e8315","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auslgnlasback.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auslgnlasback.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80a15bf-6268-5716-8a7b-52c353b4bb82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auslnboxmessage.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auslnboxmessage.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1faab0d1-2fd2-536e-a90d-1f5ec1e1778c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausmgt.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausmgt.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0277aa57-a9c7-5e4a-9669-80fee154565e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausmygovlodge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausmygovlodge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea96ad7-b9c5-5415-a902-d1d139b01333","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausmyservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausmyservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6303a3aa-18f7-5349-ba3c-d51d85370dc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausonline-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausonline-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb387402-abec-54e2-83bc-50e3309a2e9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausportal.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausportal.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89516725-87b0-5f0a-9042-0c1a0b3a692c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspost-nondeliver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspost-nondeliver.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54e6db9e-f318-59f1-8ce6-35a666c822ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspost-parcel.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspost-parcel.center']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec02c12-5edf-5f45-9fc4-ad928be5f396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspost-shipping.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspost-shipping.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05f3f83-5d46-5ce9-aa7b-59d90a43af4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspost-track1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspost-track1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ede848-384e-5db7-8392-21d48c5c39f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspost-track2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspost-track2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ecc81c1-0b8e-5c4a-9c5c-131f2969d45f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auspostreschedule.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auspostreschedule.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b8c54a0-f7ae-5099-9ba6-368a6d23c5a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausrvwascn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausrvwascn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea4f612-cbdb-5ff4-bbc6-46a131cfc621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussie-casino-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussie-casino-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bfba4f-12d7-5697-8629-452bedcbb5b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussie-payid-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussie-payid-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--342c5089-f699-5a31-9c5f-31fd8cf70006","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussieanabolics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussieanabolics.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cddd8888-8699-57a2-acb2-acdf593a750e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussiebt-aus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussiebt-aus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d7accf-00a8-501d-b629-400a4ea47f52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussiebtcasino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussiebtcasino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b945f6cf-92ab-51d3-8343-0d817e188daf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussieinfoaustral.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussieinfoaustral.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff92bea-3731-5d6f-a484-cacb1f06e803","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussieviewaccessau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussieviewaccessau.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb0d717f-472f-50ef-894b-ec68823a221f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussreclaimserv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussreclaimserv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f94bb2-b6f1-5b7b-88af-89daa90be4a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aussurmanyrnas.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aussurmanyrnas.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5647cb97-848f-5031-b331-3af72f5ecc85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: austincountyonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'austincountyonline.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc1d967-11af-5b45-91cd-6643675c8d10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: austinonlinemanagement.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'austinonlinemanagement.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0b5e4f-9fb7-521b-afa3-74b95a6375e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: austr-apayg.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'austr-apayg.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a6e06cc-3e5b-54ca-8628-69406d0fcb9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australia-best-online-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australia-best-online-casino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a177d5cf-c4d8-593e-8be9-cbed7478e346","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australia-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australia-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a73b64-d310-5fda-bfe4-959e92d60d80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australia-dollycasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australia-dollycasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4362d271-8e5f-5047-9deb-5b802987eed4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australialottodraw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australialottodraw.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--262d2705-c136-513c-84a1-d53db9c592b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australianlottowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australianlottowin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3db2451-3014-581e-87af-9523e0277061","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australiarx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australiarx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02521ef-42ba-5344-aa73-8866aaf10553","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australiaservice-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australiaservice-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30205a05-5208-5cb0-9052-181b2b445344","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australiaservices-atogovau.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australiaservices-atogovau.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a58f998-0bf2-5122-ae3f-8d1bfa7e500c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: australiat-lncome-grantconnect.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'australiat-lncome-grantconnect.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb4a16e-85c6-55da-8d19-421b22edf51b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: austreethubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'austreethubs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c786625-ea7c-5449-acc5-247965585636","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: austriabonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'austriabonus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d12c9178-2376-511f-b2b9-1c0af3f56c19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausumaryuto-lodgmnet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausumaryuto-lodgmnet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86864126-7c65-576e-9deb-32878c1e5309","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausummarthun.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausummarthun.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3951351-ef33-5ebe-ba1a-970e91067058","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausummarylasdash.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausummarylasdash.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2218c1c9-9a11-578f-ad00-ef53914c00c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ausvergvrau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ausvergvrau.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9554841e-ba2f-58c5-9d6a-a08131c79719","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auswebservice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auswebservice.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ab8a20-2916-56b0-be59-5148e74a048d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aut0r0uteqc-recuelectronique.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aut0r0uteqc-recuelectronique.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b96e8f22-3b07-5eec-a0c7-680225be703b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autardio-soi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autardio-soi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11549dee-519c-5f4b-860b-57747007ab3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autenticartoken.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autenticartoken.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bef4034-1042-5de8-8112-acd3067da7da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autenticarusuariopj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autenticarusuariopj.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb5f72a-099c-5b51-a360-6598a1938a42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-axiom.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-axiom.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cafb267b-97e5-599c-93fe-54490415f905","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-based.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-based.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b943dda-005b-568b-939c-cfa861aff6a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-bmo-mobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-bmo-mobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4299e864-5876-52f8-ad5e-39fbd391ed3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-bybit-cn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-bybit-cn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c445053-2bd6-52df-8d34-d3dca583e9ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-c3bank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-c3bank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77930208-014e-56ca-a00b-efd25d199215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-card.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-card.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d59e75-dcb6-5e5a-ac59-12594dd0e067","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-centrelink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-centrelink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a832b6d-686a-5bc7-a415-3841859f29b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71fa553-c8c4-5cf0-abdb-86a2f2f87509","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-coinbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-coinbase.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eeff436-ecaf-5cc1-97c2-2645850af55d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-distributed-pattern.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-distributed-pattern.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98562945-1e94-5222-96e9-f5ba0a6cebed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-ethena.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-ethena.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ccacbf-07c2-5ae7-a95e-f48bea4bf0e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-etransfer-cra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-etransfer-cra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937e1702-e529-578f-8d98-3e4a012d6c06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-firelight.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-firelight.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c04c3e1-815b-5df7-9586-858a6ba85935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-firelightfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-firelightfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ec0bdb-8df9-5381-8ac6-f170ff45a205","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-firstmissouri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-firstmissouri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f0b070f-409c-5cc4-b4aa-e958aff5568c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-firstmontanabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-firstmontanabank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b19fd2ca-4aa7-55bc-a1e7-faaf83189379","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-gateway-service.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-gateway-service.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--135c9a7f-fe12-5a20-9af2-3b8864b8e066","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-gmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da424af6-15f9-551f-bf87-f0a34ffb2172","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-hyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-hyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91fb47cd-7f39-51d3-84d1-fce9ccce2127","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-int.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-int.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22188cd-64c8-5623-bf8c-1482666a1627","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-log-in-servics-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-log-in-servics-portal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2333da72-7eb8-5e43-b8e4-6663e222adfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-mailer-myaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-mailer-myaccount.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1afa8f9c-afca-5e7e-8ca2-b9e598dca91f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60026181-62ab-5b08-949b-e75db7552bcc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-myonline-centre.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-myonline-centre.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--318bd0eb-5ca8-5f6f-b088-3e080c0036ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-myzeller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-myzeller.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3cf41a6-a3ac-5470-be9c-86f89f4432c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-na4documents-safelinks-protection-icloudpages.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-na4documents-safelinks-protection-icloudpages.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c50e49-9a68-5757-ae73-e0bd03e85419","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-node.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-node.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a3c2430-05ac-5647-9a78-dff5788ac643","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-onlineaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-onlineaccount.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01af1b7c-19d8-568a-87b7-b264d74e55fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-pinecountrybank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-pinecountrybank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564dbcf6-a00b-56dd-a5ea-6f64b06476bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-portal-online-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-portal-online-service.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d6f448-fdd8-5a15-8179-d7b1c9eabea3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-rbcroyalbank-mobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-rbcroyalbank-mobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9948eec-a76d-503a-8f56-c052c5da005c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-regions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-regions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a54556-d644-5228-b6a6-377212ac4fc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-royalbank-mobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-royalbank-mobile.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb27f61f-29ed-59df-a8a0-2ccb33cb6dc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-securi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-securi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b5053d-a3a3-5233-8a7e-001c0fc64ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-sign.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-sign.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e05c45-6a50-59db-b00a-d12876921563","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-signonmessage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-signonmessage.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5defe40-1a54-5275-a2a1-95357d61d0a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-thebankofglenburnie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-thebankofglenburnie.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--586211b2-5ccd-58b9-b8aa-eda74ab75148","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-trezor.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-trezor.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b0be7a-9012-5624-ab9a-f3629bf354e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-trezor.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-trezor.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba287fc-4a00-5f96-93ee-fb8d834a1e8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-unitedfcu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-unitedfcu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa7f320-29ba-5676-a761-8532a7c00122","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-vault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4717d980-293f-5224-85d8-19be76ec0551","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-withdrawhyperliquid.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-withdrawhyperliquid.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b5f93b-14bc-5d96-93fd-de53021ffa29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth-xfinity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-xfinity.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301b8156-5729-57c5-903c-bf04473624e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth01-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth01-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a1a749-0094-5cd4-88dd-c975fe1768cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth01-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth01-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa85bea-b425-5f3a-9b62-ff56a79fe728","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth03-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth03-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1bdad40-b1b6-52e2-ab82-55bf8af39860","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth04regionsgateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth04regionsgateway.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b98d79c-2fcd-59fe-8d58-6e55b3d5fe6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth05-wellsfargo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth05-wellsfargo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee548f72-9140-5a69-a5f3-be0050956174","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth1-okx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth1-okx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--091d2139-320f-529a-af56-379e9e882ba7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth11-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth11-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--373d0d1a-95fa-5e74-acd8-29ad421a5e9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth16-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth16-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--278f218f-3fc5-5343-951b-4703e5741df2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth3-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth3-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c123383a-8cf0-56ee-a038-b1d00c1aead2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth4-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth4-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7679206-6feb-5ab0-947d-992280a10b94","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth5-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth5-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2456dc77-43b4-5af4-a3ed-7f6f4a556d01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth51-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth51-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad1084c-7a24-5296-8167-befab75bb2da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth6-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth6-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf0b24f-9f0b-5858-ba73-32a3df3a3de0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth7-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth7-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--568c0420-dc57-53fd-8880-97af59f6b072","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auth9644667.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth9644667.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee4ec30-5739-59b6-90dd-ca504493615c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authbread1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authbread1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba71f84-aa20-5eac-ac40-2b821f16bc02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authcibc-clientservicemanagement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authcibc-clientservicemanagement.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fca2bd44-6736-5f5f-bb8e-3728d7079593","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authcollabstr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authcollabstr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff5d628f-42b9-5c5a-95a7-3b8222450068","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authcommbank.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authcommbank.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50504442-a5fc-5766-b8a4-9b376ba01988","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authdoc-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authdoc-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92461fbf-c041-5c56-8c32-a681ed949608","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticate-bankofamerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticate-bankofamerica.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f105f4-5f5e-562a-8192-2fbcaa0fd465","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticate-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticate-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702b5b3a-6ad7-5a40-8ba0-2c7b47bd0d0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticate-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticate-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc2bc16-a95f-5f8c-b92c-9bea474567d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticate-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticate-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a141858-8d82-52a6-a32b-f3d8b619ef0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticatecibc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticatecibc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4638f1c7-8fb9-5287-9c3d-49dcd99e5a3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authenticatemygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticatemygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f242ba33-6ed5-51c2-9783-3bd5899314d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authentication-okx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authentication-okx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c175ccab-4c6e-53eb-a8ad-bb9f16ef78f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authfaceit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authfaceit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fcc4cc9-990a-53b6-9aa5-b40a6bbbb93b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: author-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'author-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78419aa8-deb2-5695-9b5b-25a6b7afa260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorise-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorise-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd6d191-66e0-53e3-b620-4d13cb0b78dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorise-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorise-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ffd7d5-83e8-59d4-aa15-9bd4fac1e44b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authority-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authority-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60f8484-522f-5bf0-9447-7e53647a4b58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorization-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorization-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9fa87a-4caa-5f68-82df-179e81cd26d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorization01-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorization01-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ea67bf-455c-57c7-be3b-7bd0ac797b72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorization09-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorization09-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--129223c0-bcf8-528f-bc52-0a8d17c60b6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorization31-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorization31-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f65a1abd-239a-5fe0-98c7-b7e9556a6541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorize-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorize-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfc8f39-e8da-5dde-9789-5060e96c3913","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorize-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorize-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cdf198f-9f48-5572-99b5-9beba79029b9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorize-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorize-kraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b052313-8d0c-548c-a3b3-3f5b04bd698b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorize-ledger.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorize-ledger.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea4f674-5e91-5bce-9f7f-c8544d83febe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorizing-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorizing-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4060b84-5cf0-5945-bff5-72ba5002eef7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authorsforearthday.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authorsforearthday.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb9b574-28b5-5c50-a6de-7b8f2c54dba4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authory-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authory-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d00ef71-1cfa-5a2c-b2ed-a2e004a1b86e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authphantom-update.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authphantom-update.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a40dc5a-edd0-50ea-b212-3a123e55958d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authprocurement.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authprocurement.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6743e7-fd64-53ca-9863-a6fd4bf36aa9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authregionsgateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authregionsgateway.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f08967-e3c5-52ca-aa52-8073d4144d20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authrizephonerbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authrizephonerbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8082613e-d7cd-50f4-8ce1-9270f941c52d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auths-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auths-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d241ad3-9b9a-5f8b-8d10-84d8322a8c58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authsantander-pt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authsantander-pt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88306973-712e-5f44-bb08-1d278912edd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authsantanderpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authsantanderpt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da344b1a-d9b8-5acc-8cc6-fbb86f403c6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authscotiabanksecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authscotiabanksecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d19cd9f-089f-570e-b609-617fbc88407c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authsignmyrbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authsignmyrbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5760d3-8c1a-5018-ab5d-91e27e6d54ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep01-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep01-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb8441c-7895-5bb1-9041-807148e821d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep022-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep022-booking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab3acde-9580-561c-a9ef-c9b070059770","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep14-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep14-booking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4bfe0f-9388-581a-b36a-46474c356b1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep286-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep286-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a991ba-254f-5934-a272-a9ad6aaac443","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep385-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep385-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35222ab9-49fb-5854-9bf0-8b7a6104f8df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep390-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep390-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7470c7ec-3311-5f3d-b214-1c5e2e2757be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep489-agoda.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep489-agoda.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be0d452-5738-5da0-ae2d-6c9065850ecc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep61-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep61-booking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3c52c5-ecce-52cc-aa40-0bc731948ceb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep61-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep61-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aeb10cf-7759-5856-87f7-bf5599a8ea64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authstep88-booking.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authstep88-booking.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2db6fdc-a78c-5bc8-b734-f0b9c76abfd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authv2-dropbox-safelinks-protection-document.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authv2-dropbox-safelinks-protection-document.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60f2dfa-f574-5a1b-84cd-77b9c788702c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authv2-dropbox-safelinks-protection-docx.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authv2-dropbox-safelinks-protection-docx.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604e48b-2a2f-5c77-b991-eee573cb95d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authv2adobe.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authv2adobe.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baca38a-0206-5bbe-a68f-57f2e9578598","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authv2o-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authv2o-icloud.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ffcc569-d9f9-5bc7-a071-fe8ae8cc10af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authy1-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authy1-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c921d0b5-a725-51db-9246-bef55fb6ee0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authycord.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authycord.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b21dd7-cc77-564b-9dad-1b6b6c8abe06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: authyicloudwebin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authyicloudwebin.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--367da9f2-e18a-53c6-a2c9-7d3226281f5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autismcoin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autismcoin.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--647b83fd-ab0a-52bc-9a0a-06f9a52affbd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autismcoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autismcoin.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04061a64-3c26-53f5-8340-995a619d9b22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auto-stake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auto-stake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd41496-364a-5459-921d-8c38b8e939a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auto-transbud-net7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auto-transbud-net7.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f443d04a-8019-5539-ac29-559e6a84fe1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autobanhe.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autobanhe.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba07ec1-5348-55f6-87f9-361915d9517a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autocene.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autocene.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522e7166-c508-522c-bec5-d471d209d9c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autodespachaveiculos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autodespachaveiculos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--457d2a92-e632-5df8-9778-3e6bcd194978","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autoedespachanteveiculos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autoedespachanteveiculos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae778ef-eade-56b7-b94f-6c32ce4c7ec5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autohaus-finkenzeller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autohaus-finkenzeller.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cff8d56-8bc3-5798-93ee-6a7e9c790111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automatedinvestmentplatform.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automatedinvestmentplatform.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc5d810-0d3e-54b2-a783-8cb28ff9f7c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automaten-spiele.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automaten-spiele.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c818da-eed7-5043-92c8-df496c53e3d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automaticads.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automaticads.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7848d72b-7842-5376-bb24-d5ccccc3f9f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automaxx-stralsund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automaxx-stralsund.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40768d96-7a77-5924-8f4f-a62ce06eb940","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automindgr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automindgr.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9543ca8-a93f-51d0-b806-32ae211b836d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automotiveholdg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automotiveholdg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0599f2-0abe-5ab8-907c-7ebedbcb0ebb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automoveiscjsoares.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automoveiscjsoares.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--432a3a61-20c0-5d13-8b24-7e4be96bcd30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automoveisdaba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automoveisdaba.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30027cc3-33ba-5c0f-870f-de681393f0ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: automovelseminovo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'automovelseminovo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9950ebd7-52cd-5b9d-ab79-0f1cab433fc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autoportaldigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autoportaldigital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c3f6527-2c71-53df-b8bd-3d257243996e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autorenew-netflix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autorenew-netflix.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c5e3a2-4ffd-545e-aeed-fab8b837817a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autorizatoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autorizatoken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7100379d-c757-5381-9022-40985929c808","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autosoftdiag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autosoftdiag.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbede47-8ef0-5d91-9dd2-3fd74a83a013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autostylefirst.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autostylefirst.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aee54b4-c90d-5dbd-92e5-91b6f907b615","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autotrading.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autotrading.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a898190-f0d4-5187-97e3-87837471906f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autotunecanada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autotunecanada.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8c9d1d-51a8-5311-ab34-7b20740121e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autousaunitedataportabaseoli.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autousaunitedataportabaseoli.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8037346-6f66-5e78-8e06-63cb08d10718","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autovdt.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autovdt.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43df8fd6-373d-5809-9ad2-7bdf8885e4b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autoveiculoportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autoveiculoportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ebf85d-0e13-5cc2-8609-47ef195793bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autoveiculosba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autoveiculosba.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c46802aa-4ac1-5b08-9f74-730f9bb503e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: autoviss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autoviss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64bc5e09-25c0-57cc-9547-d0ab7748ab49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auupdate.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auupdate.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44854436-1c7a-5479-9e2e-0b9896f78eca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: auventor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auventor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4d2e1b-ea5b-5736-bd46-7d68017997cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ava-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ava-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91b9b8b-6691-5cb8-87df-ce4efeeff108","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ava-earn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ava-earn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d78546-97d6-5f8e-9fdb-83f3811e6ed0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ava-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ava-hub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15eff613-9197-5d39-918e-76864607c35f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avabonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avabonus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ec3ec1a-5c39-5867-a81a-95e6e010be88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avacollect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avacollect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1db318-adf2-5533-9f40-82f98adafabd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avadefi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avadefi.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364a9df8-b061-5ac2-a95e-c80924fa2986","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avafinance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avafinance.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c89335c-9ac3-5cf8-a506-f8f6e87ae1cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: available-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'available-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7d7030-b5ca-5f48-9ce0-89a1a1531fda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: availproject-allocation.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'availproject-allocation.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9684ff6b-4626-595b-b56d-7040ebea19e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: availproject-allocation.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'availproject-allocation.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1bde8b-ebef-5d92-a008-47acf5fabe23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalanche-mixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalanche-mixer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf15454-0f52-5f03-9978-c5b1a1632b3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalanche-vote.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalanche-vote.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf7f917-f3c7-53b7-9b57-9786959fe9b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalanchecumbrixapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalanchecumbrixapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50bf032f-d4ac-5f55-9df1-4a28d187d7cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalaunch.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalaunch.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf145f0-9dcf-5216-8289-bf40d2ffab10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalauncn.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalauncn.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65f0ab70-48e4-5ed9-b6f2-a164ab2b1c05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalgpt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalgpt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--750f4035-0654-588c-bb5b-dd9e22c0da8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalnache.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalnache.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e289055-db72-5c6d-8f75-c3c28d5fd09d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalon-airdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalon-airdrop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c039e85-fa5b-5300-bedd-e3eafcb587c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalon-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalon-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5174428b-a6f3-5d86-9338-fc3993c95957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalonfinance-airdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalonfinance-airdrop.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f30981b-a189-50aa-a395-e5192a8282db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalonfinance-claim-airdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalonfinance-claim-airdrop.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc9d711-5683-5abf-a938-35a22b9d8bb6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalonlab.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalonlab.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ace557e-6746-5e74-9fe4-cd001951ef33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avalpagos.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avalpagos.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62400e85-e7ce-5d09-800a-8d515931684c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaluanch-app.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaluanch-app.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5e50be8-1140-51a3-b3e2-3cd73b5ddbe9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaluanch.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaluanch.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f4f18d6-916c-594f-90b7-310f4fd7fe76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avans.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avans.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6cda0ff-f62a-5870-84fd-68be70876212","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantadorpay.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantadorpay.trade']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e109a0dc-bc56-51a0-ba01-a7ab3b0adb3b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantgarde-casinos-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantgarde-casinos-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb9eb36-67a1-57d1-9855-bfe44a9b1586","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantgardebetcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantgardebetcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4595e4b6-9e8b-5b56-a078-684e6d679f0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantgardebetcasinode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantgardebetcasinode.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dce5e0-193f-5d45-9df4-3316dffb7c67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantgardecasinos-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantgardecasinos-australia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9801a9e7-bba1-5c9d-9b7b-f76cfac62b0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantis.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantis.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de89221-24ee-5ce8-ab60-6f92e4c90b85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantis.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantis.money']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65642485-7dfa-54e9-b6b2-517920877259","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantisfi.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantisfi.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--121bdd2a-093a-5fb6-9dee-b8d1d9330464","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantisfii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantisfii.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--217a19c8-2e9a-5dba-bca6-48d8a6004d8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avantls.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avantls.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7c3df3-c6ea-5d55-92f1-54ac14995fd2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaprize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaprize.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78663253-1a45-59a2-a217-f215162eb354","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avareceive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avareceive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a2f44a-bf26-5326-be16-919919b6cb80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avastake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avastake.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d7c309-fc4a-5255-a6d1-41038a58150f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avatarzclub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avatarzclub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1418658-417c-5246-b52a-c79e707a79dd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avatreasury.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avatreasury.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156a08e5-d161-56ce-a9e2-2be055bdabc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avax-protocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avax-protocol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b9b92d4-8f84-524d-ad10-1021e16d3f6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaxbonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaxbonus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4305eefe-f753-5057-86a1-86f67b87436d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaxcollect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaxcollect.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5e8a36-b725-571a-8251-17bb9bf1072b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaxnetworks.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaxnetworks.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a300f45c-303c-5c98-9e7f-6eff8214388c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaxprize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaxprize.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878d119-f7fe-5bcd-b953-f35872cc3328","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avaxreceive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avaxreceive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec2bdd3-54f9-5253-bf12-32ad8609c37d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avbechix.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avbechix.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb16bbb7-a1dd-594a-ac7e-834857222d73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avdreamesdsa3454etryfsgdcxbfn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avdreamesdsa3454etryfsgdcxbfn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bc20ecb-f431-5e99-a679-2d0867e96932","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avedrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avedrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--684c8362-f406-59dd-9912-782134fd3435","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aveforge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aveforge.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0def94d8-0176-5ad3-947b-b686a00d732a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avegamovies.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avegamovies.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af29695f-a12a-583b-8933-6086a5d908b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avegamovies.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avegamovies.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f50f66-a946-52dc-bc22-18205e568e9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avelixio-official.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avelixio-official.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38fa46c0-39bd-5d0e-b30e-28d724635057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avenoroperator.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avenoroperator.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6116ca2-5caf-552e-940a-ba5aa41a244c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avento.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avento.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5ed8fe-6655-5d2f-be4a-a5ec2d191a91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avgram.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avgram.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--354c7402-ac5b-5aae-8165-db5005d9250f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviateroster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviateroster.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e56b7b-efaf-5ba8-baa7-780704fd22e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-ao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-ao.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d630ce-b376-5b24-97bc-d7aef26ffee3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-in-india.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-in-india.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96ecf8f-25f5-5ecc-b7f4-703cd6cdab44","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-india.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-india.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce96b0e-7dc0-5dcc-913c-5b9e88cd3d78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-official-indi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-official-indi.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f33e3c7-aeb0-538f-8a0b-b26ef899c777","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-official-indi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-official-indi.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea9bdaa2-8154-54ca-9c58-635f83f2ca96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-real-in.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-real-in.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53ffb0d-f4a7-5ac0-b044-8c73e1ebad25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-real-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-real-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee7f5b2-bb65-5733-a75f-ac617144aff1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-verified.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-verified.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bad800-ce48-5711-af45-446ec0924295","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-game-verified.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-game-verified.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93516ad3-1d41-5c21-a4b4-8da1c8498352","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-games-in.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-games-in.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--068196dc-459a-55a0-bbe0-98af8d4ab778","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-games-official.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-games-official.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d757b6ea-d82d-5b7d-9843-5664579b148c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-indonesia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-indonesia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8329b30-8b20-508d-b43f-c159d0285093","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-official-game.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-official-game.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc31860c-9178-5977-81ff-642fabd49692","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-officiall.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-officiall.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6b612f-08d8-5c11-8d60-1ffa265a8d9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator-online-game.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator-online-game.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39c142b-2d45-5d22-b3df-f159b0d372b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator05653.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator05653.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25fb682f-6dc4-57eb-aef1-30fa98d9d83b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator07537.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator07537.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf9a66f1-6343-5228-af0a-54b61200bde9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator14961.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator14961.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3de50ef-a7a8-581e-81ab-44be23bd3bd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator17753.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator17753.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58f1a54-1dc8-51bb-b7bc-5e501edd87c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator23405.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator23405.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da59841-42af-543c-8669-f28a45e0c7fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator31656.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator31656.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0132857e-20ff-5bfd-bc4f-cfa2d19b0040","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator37603.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator37603.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--104d9b4f-4fa6-551c-b712-02a2068c805b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator45839.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator45839.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cdb6e5f-a1e7-5e50-8da4-96d8fb8f3001","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator49346.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator49346.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f5687e-0be3-5dbe-a545-f42b72733669","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator55400.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator55400.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f39d071-7ff7-507d-81cc-b4554856ea66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator58175.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator58175.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29340e62-6676-5c6f-bc01-df92831022b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator60181.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator60181.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8197d4a-323d-58c7-b2e1-b2edf54e3d87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator60255.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator60255.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb757a3b-6f75-5fde-aafa-a7cf8411a2e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator63663.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator63663.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b48c367-370c-5af1-a882-b2ebe078fff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator70853.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator70853.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b050ad-1179-54b3-8b0d-9e4aa6e03861","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator71423.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator71423.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e872418-d926-5bc0-be03-29f33fbea3c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator74854.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator74854.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--549aa166-6cde-57da-92d8-2969cb1f1cbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator86613.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator86613.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3f865d-9eb6-5fea-9c41-dda916f6ac9f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviator91753.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviator91753.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f9d9f8-cb68-5587-b4f3-e980f40604a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviatorindia.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviatorindia.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebc72c5-da2b-5c9a-943a-7c7f8bd4efab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avici-money.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avici-money.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89339798-3aa2-53ee-878e-23eef435401e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avisasa.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avisasa.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68b6c75-1b7c-566c-a546-1338f77aad9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aviso-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aviso-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca9a19f-ee5c-5f7a-b3aa-d169444b68a6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avisoincidencias.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avisoincidencias.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10adae33-b0f7-54dd-9a07-4c94e34384f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avisos-enlinea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avisos-enlinea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366513ad-d03e-5b7f-bcf2-5d710fa49087","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avisos-ingreso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avisos-ingreso.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--606e634b-78a7-5eaf-a596-9a8c2471927f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avisosantanderimediato.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avisosantanderimediato.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80701911-c566-5cd2-9094-7742a3e8d5f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avitusgroup.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avitusgroup.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1129a441-26f8-58ea-b003-db323a196b76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avoirentor-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avoirentor-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790c92fa-72c4-5e15-be1c-5eb37f895cc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avoirrentaban.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avoirrentaban.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55656581-6396-5466-ba82-31399ac65b68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avonexpro-es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avonexpro-es.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f4bb52-9cd7-54dc-a3c5-b0eeffd8ad9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avonexpro.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avonexpro.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c4f9f08-3c90-59d8-b67d-6611d3a50a6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrfd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrfd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca8605-7c4a-5ee3-82e0-ec690dd046ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avronabit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avronabit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--153fcc23-f12a-5b00-a4c2-80e675ff25f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabet-2026.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabet-2026.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1297139c-3918-5326-a648-5710fdc89366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabet2025tek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabet2025tek.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f85a402-f837-52cd-8a4b-fd6ea2eba56d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabetgiris.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabetgiris.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c71857f-41a8-51ac-9073-f231a114f480","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabetgirislerirn.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabetgirislerirn.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d7645b-d8ea-5349-a61c-f21f1f108876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabetgirsleri.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabetgirsleri.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2339238f-933e-58f7-b72c-15d1b8cd1178","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabetimiz.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabetimiz.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b376dbd7-ede5-5b01-8f2b-aafd7837832a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabetresmigiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabetresmigiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b5155a-d109-5f83-aa19-528a81309fed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avrupabets.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avrupabets.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff11e92-164a-55d1-ab2f-2cc25bee0caa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avruprabet155.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avruprabet155.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96de974-e8da-5f62-b899-a856fa0a482a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avs24.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avs24.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--625201da-04c2-5e8e-bf41-dd492bd2be80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avs3-eigenfoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avs3-eigenfoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c0e2793-b13c-560a-95ef-f617c69cc43d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avs3-eigenlayer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avs3-eigenlayer.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c72a714-11be-5a3e-b3f5-c244c01d64aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avserivce.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avserivce.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb5d4d4-0ba9-5ed3-8512-5dd1d27b11e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avto-shcola.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avto-shcola.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b62a2101-4181-5997-955a-19c11c55407c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avumanager.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avumanager.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0db302-e693-5093-a95d-e09edf5d0b7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avutian.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avutian.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f25b24-7e87-5cde-b769-42ef8e0521c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avutorie-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avutorie-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec6b9d8-e81b-5086-a90b-b8201026bbc8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avvabet-plussadresler.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avvabet-plussadresler.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3f43d6-e4ca-5ca0-8544-7888a1c8c1b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avvabetappgirsler.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avvabetappgirsler.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea4aea9-cfce-5cb2-9d97-7424037a7145","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avvabetgiris.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avvabetgiris.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f468ed5-15e3-528f-bae0-57221755d6b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: avxdex.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avxdex.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--590d16e9-cbef-5d8b-b235-2546280cd3f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awan-ledgerix.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awan-ledgerix.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15042a38-adb2-5583-9a60-2c509ee76e22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-beam.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-beam.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4129038-0767-56b8-bf3a-4619072d034e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-chiliz.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-chiliz.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5eb6e8-195e-5a21-a163-dafeeb95be25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-clink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-clink.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f0f351-e5c4-5691-8de0-efd257f8eb49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-dydx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-dydx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce434ca-e117-5934-be63-23f7a43551b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-lido.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-lido.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01b717c-54f8-59df-a4fc-4d9e5e8aca50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-link.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-link.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcaaa5f-01df-53ec-9d6e-07543e7b44c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-pepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-pepe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d757253a-a80b-5bd7-b076-ea8c69133dfd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-shiba.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-shiba.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42c18a1-e71c-5ad8-a98b-e1eb2982aff8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-shibaprotocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-shibaprotocol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3d126b5-b26c-50da-abe3-f094636968ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-shibinu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-shibinu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66f8f1f-059d-5db5-8817-9ce0c3bf21d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: award-yieldusd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'award-yieldusd.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26b054b3-cee0-5a2e-8f50-fafd512d492f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awardeth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awardeth.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c9f3d9-fcf6-5ffd-80d7-d550c3e28c63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-dydx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-dydx.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8adba2b-8e7d-5ac9-8a1e-a8ecfdb83aad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-lidofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-lidofinance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04404706-491d-5f60-a893-83569a867c6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-pepe.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-pepe.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--639cd0c5-fc4b-5d09-a9ff-239b31e54616","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-shiba.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-shiba.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d60fc8c-7e33-5176-8185-20ae4bd3585d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-shiba.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-shiba.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d490192e-8275-508c-a269-7462296acc58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-shiba.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-shiba.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba97bf1b-bdf5-5077-ade5-bfd9c36d3f62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-shibaswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-shibaswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafab77a-d73b-5640-9187-5d9d21cd2647","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awards-shibatoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awards-shibatoken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a3b0dc-95d9-5bb3-a041-3b13d17b39d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awcpharmacy24h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awcpharmacy24h.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62700c5-bb08-5e4e-b78a-fa16f43a2690","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awemos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awemos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--344ae2ce-1042-5ef3-ac90-4d30cf857906","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awesomeautosllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awesomeautosllc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53867e6-7f8a-5a24-afeb-5dcdf36e0326","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awinturavipcl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awinturavipcl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a97b1a3-a81b-53d0-88c3-e7c5884967a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awisullun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awisullun.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e1a4c2-19f4-50fc-9034-3a4c8507124a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awoirencia.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awoirencia.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1178f3-b598-595f-a88d-c1ccb1eff54f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awpgynmesa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awpgynmesa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1531d7f7-900a-5561-8c93-7c50ad3e7850","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aws-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aws-google.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745b2ce9-562b-50b8-a6c1-1a30de2633eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aws73j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aws73j.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--986ffedd-81ae-582d-968d-34acacc48d33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aws91m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aws91m.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e34106-b367-5476-bafa-847d01287c0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aws95q.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aws95q.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--685af429-c63a-5df1-b9c3-93adef7a30b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awsaipresale.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awsaipresale.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1529369-333a-5bd7-ad8d-797a2c1ef636","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awsauthservers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awsauthservers.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--508b7adb-57cf-5059-8809-598c3ff64937","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: awswalletamazon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'awswalletamazon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13068a89-8793-5d76-aaa3-8c72ffc54114","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axbitech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axbitech.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0c26ef-1286-5c4b-8a9b-40ade303f9ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axdaoupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axdaoupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa9117c-126c-59a7-951b-61326ac390af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axedrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axedrainer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a034d9e-05b9-58a3-b5f0-eb04284a2c82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axelar-reward.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axelar-reward.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93126ddc-5e3a-52b3-a608-04e983742081","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axelascentor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axelascentor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1158d02f-4f5a-59b1-b4d5-e8aad3c90d46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axelascentorapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axelascentorapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b3dd31-6d5e-5a18-b683-c683bd4e167f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axelautoworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axelautoworks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6792d8e5-42d5-5f94-bef7-9daca09837ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axentklyve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axentklyve.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--762e5b25-2bf9-5c2b-82d4-0d25ad481247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axgt-dao.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axgt-dao.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc811fe-76e1-5ef9-a56e-268e9bae777c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axgtmigrate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axgtmigrate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c553c32-5d0b-59df-98a9-d8bd18858ca1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axiomplatform.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axiomplatform.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--febd3154-b5bf-57d7-9c95-df494f03429f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axiomsniper.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axiomsniper.media']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2332a4d1-ba87-5d06-b71f-bc788cfd2dde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axiomupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axiomupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e2e8b9-e444-5b71-ac88-9678e66d1256","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axion-ledger.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axion-ledger.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d20837-298d-5d29-a2ce-ae447a8dda75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axiorn.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axiorn.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d02e4-a325-5db5-a290-1025ca31622e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axira.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axira.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34bec386-da50-56c0-8455-019e66a9a090","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axiscontrol.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axiscontrol.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e784968f-b86e-5614-8e2b-5f225e94bb66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axisrobotics.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axisrobotics.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50a6717-6fba-571f-ac14-911f4c5488e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axissyllabus.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axissyllabus.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd55486f-49a5-5635-8fab-7aff40b4c839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axitools.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axitools.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cbed075-176e-56df-a67f-203508b4797e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axoim.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axoim.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91747436-8435-55e1-a6c5-fad4a413d837","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axoim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axoim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c48c0291-b70a-5e31-a895-095b0c5b3f05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axolmeriqbrunovast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axolmeriqbrunovast.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee405a9-c9c2-544b-ac74-18a77b3a2f40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axotrade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axotrade.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea57aa44-3762-5075-a90e-71080168282b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axsol.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axsol.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38606221-adcf-5dc0-ae16-c379de9875b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axtercoldwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axtercoldwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0184ea-5be1-5b83-b178-18a63b8cbab2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axtnlygnvl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axtnlygnvl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e468660a-73f1-5c50-832e-87504fafce3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axvdex.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axvdex.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d2154c-2a01-527e-878c-3488a76b8511","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: axvdex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axvdex.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f628ba7d-88fc-5cfd-8689-4c54d5628fed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayala-ai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayala-ai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83a80c43-0adb-5959-897b-7c9ed3cf6567","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayala-investments-ai.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayala-investments-ai.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b5b9b9-0736-5eeb-9480-ccfa4326a672","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayalanexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayalanexus.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2702df9d-c79b-580c-8b3c-3dadd06a6f69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayiwap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayiwap.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6756cc78-e6fb-558a-9ce6-cc2b1f01bff4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayubpurcaptainabtajulislamhighschool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayubpurcaptainabtajulislamhighschool.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd01c5f-a6de-57de-8390-c51837017946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayuda-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayuda-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15e024f3-231c-584c-b931-0dc7b680f66a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayudamex-servicios.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayudamex-servicios.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744cd390-a660-57d9-8b62-a6c61487fc1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ayylmao.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ayylmao.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc0aba0-a0f3-542c-ac07-0bef9b42b915","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: az-aviator-game.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'az-aviator-game.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d0bb19-7254-5590-bf23-760e20f9a34d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: az-kazino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'az-kazino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5bd50e-0be0-5a92-9cce-29393c4dd7ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azarargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azarargentina.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef143720-e4cf-5a4a-88a3-c1192a3be99c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azealiabanks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azealiabanks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1783321-8fc8-544c-98ef-617d055fa3d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azekcatalog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azekcatalog.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46be2379-8b15-5088-abff-7dd166bb4441","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azetc.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azetc.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d6f065-567f-5b88-9251-b600163641f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azetec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azetec.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b450415-7597-5441-a4cb-5ec89600cfda","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azhay-itar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azhay-itar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc01dc5e-e72b-5e58-acd9-7a22c20e3894","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azhydroxychloroquine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azhydroxychloroquine.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a545a18-0f5a-5938-ba5d-0ce76d63457f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azimcorevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azimcorevex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04201a90-6cb1-5971-b57f-38624d35105a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azione-kivo-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azione-kivo-app.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb426f1d-21c6-5846-8601-467fec96c37f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azleobank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azleobank.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d8f687-b414-53c6-b327-b5028e3c8326","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztcec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztcec.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d362e901-6395-57ee-b7a3-db89d7dbcab0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azte.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azte.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebd40559-f68e-5a1c-9883-2aca1e949c74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztec-network.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztec-network.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa0df22d-c35e-5697-804f-256dc19fc3fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztec.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztec.news']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c3e4281-43ca-50e3-8df3-dcc13cf647fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztecupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztecupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bfae939-dc05-5804-a75b-ddd76282c125","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztex-netwirk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztex-netwirk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32023897-c701-5281-8b3a-1b5c35312937","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: aztex.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aztex.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e1fadd-05d2-51eb-b383-1686687ceb53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azudropt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azudropt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad2f7c4-c2ac-503d-bd5c-585dfb5afa6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azuki-nft-azuki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azuki-nft-azuki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--579c3081-f018-5667-8e10-f21ada7d25bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azukiupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azukiupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f10d15-9d3d-58e8-b1ad-ee7298f5d960","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azukl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azukl.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7717ecb-de2b-51bd-8953-1ae65de84761","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azurancia-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azurancia-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae3ec48-7515-542a-b385-00ba17c96956","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azure-expresscontainer1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azure-expresscontainer1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b9faba-e0dd-55dd-9e85-636405449357","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azure-microsoft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azure-microsoft.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea0e04a-d5d5-5e7f-85f4-c65fadb031b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azurebet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azurebet.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dcebff-61af-5d2c-bd45-33c4fcb214d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azureinvestmarksoftware.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azureinvestmarksoftware.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f003d67-8c24-55c5-ad26-dd3ecfca9e92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azurenetfiles.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azurenetfiles.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf1c590-9acc-5df2-b0be-aa4de1f7a7a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azurestaticprovider.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azurestaticprovider.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f354b80d-5a22-5ff2-8847-34124c6a0f86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azurevault.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azurevault.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61fd65c2-31ca-53fc-99af-c674c21e156a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: azztec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azztec.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf148e2-dc2c-56f0-b8fe-0fe737a80090","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b-casinoonline-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b-casinoonline-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8f09a0-fdb2-55ff-bb70-f711a30aaa9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b-casinos-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b-casinos-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8d8b15-10bc-5bfa-b1d7-c8e3e7ed14ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b-i-n-g-o-0x.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b-i-n-g-o-0x.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8981fd8a-9dfd-5271-a17c-074829995882","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b0tnet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b0tnet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38dfc424-1b3a-5684-9482-f166fd3db8dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b1117add749dac1710f1c78c9c6d5cc7.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b1117add749dac1710f1c78c9c6d5cc7.world']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8d0592-6c79-5b02-9bcf-9b946987bf30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b117x.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b117x.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4660e33e-6384-5587-9669-b843eecb49fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b11ta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b11ta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff76ffb8-083b-54be-a225-76120dd01f04","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b11ta.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b11ta.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ba1186-a5dd-548b-a00c-fbb61c81a491","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b19917coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b19917coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e30601d-9f2a-5426-8feb-7f4876257f6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b1ackstassh.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b1ackstassh.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a7f833-a0b3-58af-b1e5-a479d236e897","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b1gbro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b1gbro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279d75ce-bbe3-586b-a96b-ae8027b4b994","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b1tswaper.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b1tswaper.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9498f6e5-37df-5b3b-b4e7-7d928db2b327","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b2bsolution24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b2bsolution24.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ab92f1-8cc7-5e76-8943-2da4c4f68afc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b2sprut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b2sprut.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e2da26-c6fa-526f-b564-50503b6c4c72","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b2xbet-br.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b2xbet-br.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e32630e-5213-5372-9939-c4d668927876","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b3vv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b3vv.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f132e9-cc5f-5994-8897-47c93d994bdd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b4939nrqb8q3cxo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b4939nrqb8q3cxo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed448ff-ad74-5f7a-88e4-b34180b24387","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b78634-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b78634-binance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ae9618-1c3b-5919-a526-51db60fadf32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b953e3f2d6f1346c50f9f1d2254dd8bc.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b953e3f2d6f1346c50f9f1d2254dd8bc.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17cb8019-dac7-5887-9906-1748bddab2e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: b9w2.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'b9w2.top']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b359f328-484f-54b4-aba8-deed37f6e983","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baahiscasinoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baahiscasinoo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33823236-91b6-5584-93f0-0c9fe3dac0bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bababet90.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bababet90.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea33ab6-3424-548b-b854-5be6c941b839","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babbysolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babbysolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--304537a6-8e84-54a2-91e8-1bfd2b702d3e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babilonbet442.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babilonbet442.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f82e2f33-c991-5945-b251-58985d0ad5b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babu88-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babu88-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddaa5e9-fcab-52f5-8681-b0efb9373ac3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baby-trump.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baby-trump.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20dd3958-e5ac-5e9c-8969-97860454c677","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babybonkcoin.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babybonkcoin.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c209f1b-07b0-5cee-8f53-1d52b1fd9ad7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babydoge-polygon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babydoge-polygon.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd275c5-e5d0-5292-acaf-ce13e6173946","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babydogeclaims.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babydogeclaims.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a08481f8-850a-5357-9ade-e1c55f54cefc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babydogeclaims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babydogeclaims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb962133-d584-5859-b61a-74617f60b013","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babydogoswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babydogoswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21fb8f00-fbde-5060-810b-f093861a59a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babydogswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babydogswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ae8475-04f2-5664-9b26-361f5bac20f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babylonblog.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babylonblog.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ecab59-986a-5f1c-b937-23d822a47541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babylonlab.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babylonlab.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19331c49-ab7c-555d-a7e4-c5612a5d570a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babylonterms.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babylonterms.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11152b8d-0f43-5190-9f3b-16321308b693","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babylonwallet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babylonwallet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622fd4c4-ab18-5a86-b14d-69afdf16dd55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babytestclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babytestclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18e9058-ec2e-50ac-bcc1-22d4c7b6d935","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babytroll.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babytroll.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97bf17e3-e759-57b7-a416-09b3ea8c834d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babytrollcoin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babytrollcoin.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dfe7d50-2a44-5b2f-9ef4-0831266c0ea4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babywikicat.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babywikicat.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6820a487-665f-5899-8eea-fd467b5884f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babywsap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babywsap.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53397794-f07f-5568-b928-7e5df45129f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babyxrpclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babyxrpclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f0828f-1c2c-593c-87b9-46f078469681","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: babyxrpclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'babyxrpclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba11ae65-d9e6-5aa1-a736-c28a93157770","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bacanaplaypremio-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bacanaplaypremio-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e604921c-b06a-5a66-a858-50f4bd28785c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bacbcack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bacbcack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b8e50b-1755-58ec-ad91-60570d2d0de1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bacbkack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bacbkack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3003129f-105d-56ba-a15b-baa4a7536366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bacjpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bacjpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a89692b-6ae1-5802-b505-b84bbd3178d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backback.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backback.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eccf706-0b2a-5e57-9bad-a13036f92314","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backbcack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backbcack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a3f579-f21f-5ed5-8661-8ac6b69bf139","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backgroundquestdress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backgroundquestdress.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c48cb2f-dff9-5610-b0c3-ba322d3a504c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backlpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backlpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43974761-19eb-54f2-8714-58b6f1a33f62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backoack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backoack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e4a41d-7242-5c4c-a566-2b6c79abcb74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backofficetrustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backofficetrustwallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8dfe1b4-cf70-5057-aa78-dc60ff26fabf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpacj.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpacj.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--428aeceb-fbbf-5344-b24c-a2f1d2acf6e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpack-claim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpack-claim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48601656-1dbb-51ac-bf83-1bb911a174d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpack-claims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpack-claims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ef0d36f-80cf-51e1-8682-e44670631762","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpack-exchange.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpack-exchange.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567761db-c7f8-529a-b741-f5c1fb37c637","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpack-wallet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpack-wallet.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb8f53d-9329-5713-8770-704d272a18db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpakc.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpakc.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14c0e5e-4f6f-5383-91db-c0bb96a79f5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backpaxk.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backpaxk.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c05ea023-e8bd-56b6-b4ec-461a194d51d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backroomgirl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backroomgirl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40df349f-58b6-5e11-9eae-c7e96e4ebe82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backroomreward.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backroomreward.tech']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c7e322-8ac6-5538-a4a8-18833646c680","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backup-safepal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backup-safepal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b25bfbf-2572-5713-9eda-816919a6a7c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backup-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backup-trezor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30c1767-2a2f-5db0-aae0-ce1e54164343","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backup01-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backup01-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0fb6ba8-9da8-56ae-afa7-31bfc9b125d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: backupkaro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backupkaro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e09fce8-16f2-51e3-9ad3-86a3d11e76b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baclkpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baclkpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ef288e-3235-51ac-9fb1-166eb9b671f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bacon-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bacon-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e083379-83a0-52a7-9c6a-58a263ab3e85","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badai-floki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badai-floki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33766e78-92eb-599d-a1b7-648a4c1db55d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badaicoin-floki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badaicoin-floki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6e99a5-3944-55dc-878a-3a47bd5731cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badallocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badallocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba38c0d-90eb-5bed-8ac6-71815269b074","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badboysk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badboysk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74c9e27c-8963-57bc-854b-83b45f1c75dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badcomediankraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badcomediankraken.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96674755-3d49-52e0-bbdd-bb1ecd3e1c0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badge-firelight.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badge-firelight.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60dfe305-888d-52e9-968c-94118c51ae89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badge-firelightfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badge-firelightfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f41d4c2-6009-59b4-864f-af1b68d39229","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badge-xp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badge-xp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4109a0d1-df5b-5ea5-90c7-0ea025a484a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badge-xrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badge-xrp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba751ab-e9c9-54e7-bf49-955deeb39a65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badgeapply.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badgeapply.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63811a16-4295-5724-83f9-4fc545457a4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badgecollab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badgecollab.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86708a3a-f5c6-5d10-8970-b34c0a0710cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badgerstatetractor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badgerstatetractor.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1d4ca8-7677-5036-bf65-46e76f0db8e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badidea-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badidea-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b12e2cf-8031-5cf9-b451-1cb24ca5699a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badidea-claims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badidea-claims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd1bcb05-e3d4-58bb-9bf8-52b24be699fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badideaclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badideaclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--094c2d60-67ed-5b21-9708-ed5d35363794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: badrit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'badrit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c576ce8-a206-5e70-b0ca-3e24d16997d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baefmockvuyesad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baefmockvuyesad.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a390d0cc-0b79-54ee-89a9-bb34c11d3404","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baeloindex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baeloindex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1c0d2c-eb77-5a1d-bd30-595a3e38bd11","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bags-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bags-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f20e80-4cfa-5db6-a058-d4b20d2ff6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bags-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bags-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04625dc5-72c5-5ee6-9064-8512dae2ef40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bagsfumbled.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bagsfumbled.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad4462f-4407-5944-ad0f-8f8a01eeb471","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bagwork.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bagwork.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8be0eee-b7a9-5d99-b215-3e2c80b6eeb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bagworkofsol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bagworkofsol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3382029d-8a77-591c-8da0-2181df183ca9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bagworksolana.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bagworksolana.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37934a0f-d487-5760-b71d-104675b3dcb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bah1scas1no.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bah1scas1no.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--552f7882-56f6-5f7a-8d2a-b322e8c67370","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahargunesbilici.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahargunesbilici.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db097f09-0f1b-5092-bbfe-bc4cf646c071","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiiscasino-giris.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiiscasino-giris.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba78cad-d3d2-5414-bc20-250037e029e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis-bahiscasinoqiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis-bahiscasinoqiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a6e4ac-1b35-5d50-9199-7a9be3c55d68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis-bahiscom.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis-bahiscom.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--404b4e5d-f183-506d-b61e-8872e2371289","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfec236-9943-5575-9aae-65661b38fe1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis-casinoguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis-casinoguncel.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad44e3b-b156-53c1-8637-5524403b4d31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis-online.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis-online.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f465547-47bc-5250-9fb0-a74815211d00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis1-casino-giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis1-casino-giris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--866a535b-7ecd-52eb-bb33-329e41499f07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahis881.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahis881.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdebc54-6287-5b85-922c-060dce5dab87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisbeta710.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisbeta710.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d446d7e0-1f95-522f-a14f-2981b1aabae6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisbudur-yeniyegirs.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisbudur-yeniyegirs.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7390a918-e27a-5001-adb7-d83b2043f951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisburolari.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisburolari.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b51601-acd1-5d14-a7ba-cfa63dc20d9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscas1nogiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscas1nogiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bff46c9-f83b-5e31-b335-27a074bd62ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasiino646.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasiino646.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83aef696-147d-5383-abea-dac9bd70a6b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinno676.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinno676.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ad2608-00d1-51ad-b06d-b64b50ac8ccc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48a40afe-2b10-50cc-9486-d1c16fc0f62b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-2026adresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-2026adresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43916ef9-22dd-5337-a269-eef0d50b6902","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-2026resmibahssitesi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-2026resmibahssitesi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77fba60-4573-5c54-876c-d0f85cc3b7ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-bahisfirsati2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-bahisfirsati2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21165fb-68e6-5d52-9fe6-c782f63d1871","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-bul.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-bul.mobi']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--683a5c76-a9cb-5109-8439-50a88cc5d80c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-dogru.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-dogru.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ed06e7-796e-5cf4-b150-ea13397a89a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-foxy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-foxy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05faa3de-2dd7-533e-bc91-928a4c95f4be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-frbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-frbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a665b08-5b4c-5856-ab9b-efbc3a0f91cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-free.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-free.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9e9188-5fc7-55a9-adf6-1dc189ddfc2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-freewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-freewin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7be8c8-017b-5bbc-bf89-a918e96f5fa6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-gel2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-gel2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef36f5bf-b295-5d63-b19d-a00f0daa4e0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-geldi2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-geldi2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca7d604-c48a-5cc3-8d58-783b441ec60d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-get.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-get.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a366fb2-f6f3-5a3a-8924-b1d33c8304e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-giris.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-giris.mobi']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7accaac1-5970-53ef-acca-73ee299e964c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-giris.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-giris.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a262399-f3ef-5dcb-a587-0ede2e733327","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-giris2025.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-giris2025.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54874a7c-f797-5040-b14d-a82c3dd19df3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-giris2026.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-giris2026.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e73b7648-e3aa-5e7b-9eda-58c7741de2a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-girissadresii.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-girissadresii.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a8eb44a-62f3-58d9-b26f-93df6dc6ce3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-girisyenibasla.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-girisyenibasla.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--244b2d94-b155-58f3-bb17-eb5b83bea197","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-go.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-go.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6833ae74-8a4e-5eea-8833-3a7d5bd42c71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-grandadres2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-grandadres2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b01d345f-a503-5ad7-abd1-b400e8c8c6cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-guncel-girisleri.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-guncel-girisleri.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f8d2a1-7c5c-589c-99ce-7fcbf80cf41a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-guncel.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-guncel.mobi']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e117047d-d8e7-58b0-badb-5e56b82fe9ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-guncelii.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-guncelii.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6688f1ce-6e95-53ef-abd2-f06bf01afa6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-guncellgirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-guncellgirisi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--186e61de-8d8b-5965-8c38-61ef54c14e42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-linkim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-linkim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc310dc4-557e-5190-9ef5-a50fe7529323","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-mobil2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-mobil2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda53ca8-e78b-5487-ad7e-442a213a24e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-net.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-net.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4b3921-4d65-59a4-abb5-4ee7a4529561","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-onlineadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-onlineadres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d112d21-c0ab-5fa0-83d2-c024c17e6b8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-orijinal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-orijinal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89095eb-e549-5e35-acf7-a15596fb28ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-resmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-resmi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c3fb10d-ef38-5b87-b711-e55fe4d3ee4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-resmi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-resmi.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1199a38d-e006-5511-9831-0406be4de350","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-resmiiadresii.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-resmiiadresii.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b601a1-53e3-5826-be9f-c11684360f03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-resmisiten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-resmisiten.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--461003b9-352e-5a05-a0c1-c3533dc95e63","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-saglam2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-saglam2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe54108-2b7c-5e57-8d4c-51785f4789c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-saver.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-saver.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8521caee-7c9d-5810-92b2-b6f9603de1f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-sefiirkazanclar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-sefiirkazanclar.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cea3a4f-36f3-5aad-b769-4c066aad90fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-sefiirskazanclar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-sefiirskazanclar.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6485bc5c-adc0-5434-a0d8-f3a96c015c17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-sitessafe2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-sitessafe2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8475d9-034f-5f5f-9797-4707702c063f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-suitable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-suitable.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf77b43a-733b-56dc-8c48-e3c4547e5797","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-tikla2025.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-tikla2025.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59091efc-e0be-574e-a0fb-25ad68c99232","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-trgir2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-trgir2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c58f396-d2b5-5d05-98d0-8425d1821711","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-vip.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-vip.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea59211-d220-5c06-b483-17f63088f8fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-vipgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-vipgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d80596f-99bd-5cb5-9b8a-97be0eed6959","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino-yeni.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino-yeni.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d70528-c6b7-5d50-b112-e247f3525e75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino1026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino1026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedac360-21fb-58b8-a289-3e504311d41f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino1135.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino1135.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08eb1919-9d3e-552d-be05-0dcbd6db2bb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino1138.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino1138.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a419c26c-6dd9-5a1c-b8c8-8a8e917604b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino1268.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino1268.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c034871d-5180-596f-aa81-523d0e1333a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasino1687.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasino1687.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b233ab-1596-5c15-8766-ff88051fdeb7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinoadres1.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinoadres1.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--702adf8d-8e2c-59e8-aaf2-0eded68cdcef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinocom2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinocom2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40bd3349-6869-579e-a195-2fcb9e20dd1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinognlgirsleri.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinognlgirsleri.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bb7884-5903-5523-a26c-ffb0d0b20468","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinogrs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinogrs.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d886432-145d-5543-a525-ccf97d30dbc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinoguvenilir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinoguvenilir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7cc8a3-c8e9-56d3-90c1-66b09a6418a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinoo-tr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinoo-tr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--026e9bfc-e82f-5022-9fb9-c449f6af24fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinoogiiriss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinoogiiriss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3769c283-bec0-5bc6-a266-96058473d7a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinooo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinooo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dadb2823-efaa-58d3-a1b6-61b57cb7fb33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinorjgiriss.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinorjgiriss.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5469ae-80a6-5453-9beb-16244ec9823f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinoyenisayfa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinoyenisayfa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--942d5efd-82d3-5f05-bdc8-135e3a9a043a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscasinto-girisadresimm.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscasinto-girisadresimm.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe435f7-edab-52f7-b990-315493e6bd67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscaslno616.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscaslno616.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976c1028-20ea-5e87-9449-f7c9fd652e16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscassino651.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscassino651.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a66451-554a-5180-b6c3-c8318793437f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscom-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscom-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c9e570-e81f-5912-bd61-7ec04b787cc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahiscom-logintek1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiscom-logintek1.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--706a979b-12c2-58db-b910-8cdcfaa743ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisfair-tr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisfair-tr.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4206ff80-4430-5f23-84cc-e5e1784c45ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisgirisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisgirisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db0d4ba-054d-5f70-8312-262d45b5f111","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisguncel.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisguncel.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06aea0f9-eec7-599a-8b41-f871557cd78c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisicasino939.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisicasino939.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bfe51a-5f71-5977-bf57-4696938fdcc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahislion-girislerirn.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahislion-girislerirn.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ce1704a-c89a-58ce-8539-d899bced08a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahislionfirsat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahislionfirsat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567314dc-ee91-5a0d-b7c5-86129b60764e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahislistesi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahislistesi.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d583a8-415b-5cb8-9d81-325f6c25651a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisoelpatron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisoelpatron.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1994c7a-5ffb-5ee6-ba17-198222baf311","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisoynaonlineadresi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisoynaonlineadresi.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bafc9528-6c91-5162-9a97-1db01ec676dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisscasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b90be5-a7b8-5507-b842-9cac1e49487e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisscassino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisscassino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--895ff5fc-ad60-5d52-bdb8-056472de9aca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahissenin-guvenli-girs.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahissenin-guvenli-girs.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68743036-7833-5693-8167-3ed45cb98240","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisvebahisorjinal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisvebahisorjinal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a4c35a9-2bb7-5c4e-8737-2e159c5307c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahisvebahisresmigiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisvebahisresmigiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9596605c-f991-5051-bd3c-720d68eb39fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahscasino-girisadresii.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahscasino-girisadresii.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebcdbe43-cfaa-5566-9553-d8a3cc34de8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahscasno.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahscasno.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2298b164-e051-53b6-81d3-f9c2e975cca1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahscomgirsler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahscomgirsler.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b54ebbe-c7a6-5df9-960b-ab76db163046","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsegel-guncel-giris.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsegel-guncel-giris.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b80d81d-0b28-57e2-9eff-5fbcc39d72df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsegel-patnerss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsegel-patnerss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ab8493-0c58-5b61-9273-88c4d9786d53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsegel1448.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsegel1448.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1500112d-b051-5b62-b977-0cde9a81bfe2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsegel1449.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsegel1449.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--545d5d6c-4fc5-5a0f-9f3b-bfb0021443b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsegelvip-girisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsegelvip-girisadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e0ead1-acab-5e71-8c71-2830e94532ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsicasino690.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsicasino690.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f764214a-c374-52a3-be48-fcb7c30a4f37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsinecasino.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsinecasino.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9edcef-fe43-57ff-a52c-c7fbaf551a50","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bahsineresmi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahsineresmi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b733532-3429-5bd8-a97d-63b4b55e3801","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bairax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bairax.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db62068-3917-547a-b80a-04b156ca401a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bakakalalakfkfk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bakakalalakfkfk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16af5b12-3eff-5648-9e0b-f551d5ff97cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bakcback.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bakcback.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af0ea4a-a047-5e6a-a322-66ef1ad64187","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bakcpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bakcpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5975f0fc-b413-5578-a46f-77a26175c6ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bakery-ldo-staking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bakery-ldo-staking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0624ba-7060-54b9-923b-14b7617ef39a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bakery-staking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bakery-staking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17eddc29-e611-55ac-b4fd-bfaafbcd8fe8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baksman.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baksman.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6023f47-b68a-5718-bedb-dcbe539fc110","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baksman.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baksman.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32385b0-94bb-5957-b975-2308f069d49e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baksman.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baksman.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5974c56d-4359-513e-bda3-de18901bb716","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baksmany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baksmany.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52545bfd-f7a8-56f0-ba69-38f0ee610a0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5495f810-999f-5bc4-b8f1-300018598da6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balance-cliqsaaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balance-cliqsaaq.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ea3f1c-a7e3-5d59-a160-981d2fe45f99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balanceairdrop.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balanceairdrop.fun']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de352ae4-27e3-579a-880f-06757f72e5bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a961dab5-ed98-51ef-9c75-92bc5b397256","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-3.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f5a6b0-ecc6-51c6-b20d-ebad05c9f582","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-chainlink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-chainlink.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86eb2f67-51ce-53ce-a06e-bb2ca8afbec9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-chainlink.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-chainlink.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14347ff1-cc8f-51cf-9a4a-8e6bc4a67fa1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-flnance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-flnance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afba6843-00b8-57f2-a284-959e98395914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-v2.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4169110e-66af-54da-ab3b-74f6b5248ceb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-v2.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-v2.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43006baa-ab2e-5d90-90ac-a9419328fe71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancer-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancer-v3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9469ea09-d3eb-5d61-82de-c17775060c23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balancerairdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balancerairdrop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c91117f-6bd0-5861-aa9b-3a6ead8095b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balaner.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balaner.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5247ae10-6586-520c-96c7-542059f43c9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baleiafranca.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baleiafranca.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3767366-8f9a-53ab-8af4-49c3507ed535","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balesterosgroups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balesterosgroups.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c8b268-97b5-5c5e-bb4c-1d35bd02bcc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balhash24.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balhash24.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc7a1a5-761c-538b-836d-c8d017500f0d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bali24.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bali24.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f4ef9c-ca66-55df-a98f-f5c99f05d074","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baliex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baliex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--008fc690-26a2-5ea9-957b-5b9ae2de115a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet320.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet320.cam']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b56031b-4739-5d69-9feb-e1727ac8c0f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet322.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet322.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c165841b-8513-5363-94c4-7cef73121b8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet351.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet351.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--775ac529-5718-52ab-90fa-6be09d9c909c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet352.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet352.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7d1b6c-a312-58df-8b0a-f540aa6b59d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet353.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet353.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84ad51d9-4b06-52a4-a55b-9e4199b6bae8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balinabet354.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balinabet354.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7cf519-6ab0-52cb-92e8-c3ebcb438115","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balkan-pharm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balkan-pharm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ff273b3-3f3d-501e-9b98-e8320a966655","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballonix.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballonix.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05bcd00f-ee77-5603-86ef-f7cec6ec16c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballonix.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballonix.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f00952fb-52ba-53cd-b48d-30720d579660","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballonixindia.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballonixindia.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e40af5d2-1a15-5627-afb9-174dc8e96163","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballot-flarefoundation.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballot-flarefoundation.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c16d8c4-9516-5977-bda5-ec9abc0f25c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballot-flarefoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballot-flarefoundation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48f0ab45-ba19-59fe-922f-dd333a8a7906","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bally-casinoxuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bally-casinoxuk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c0ad43-944c-532d-a9af-df2129496418","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballyhoomagic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballyhoomagic.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a403e5e4-7770-57c4-bdc5-3b79d62453b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: ballypremio-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ballypremio-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c29a567-e512-5d88-9faa-da5b5ee298d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balmyclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balmyclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a95482-63bf-5c52-b8ac-86a20db59c8e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balmypools.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balmypools.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd740d44-be88-5455-acf0-96d064e122ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balofult.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balofult.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0af74648-f05d-586a-b8ec-b55e8fe87ab6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baloosolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baloosolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--160d9c3c-1f19-502a-84c8-afc1f14833bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: balticpipe-pl.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'balticpipe-pl.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--041fc2fa-8ec8-5f35-b906-13e8cdcae8e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bamatea88.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bamatea88.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e42e72-14df-58e1-8796-662b58dd2e67","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banabanka1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banabanka1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee534b0-d6fe-56ac-8f7d-52305786b2b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banamexn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banamexn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2441590e-1504-55cf-9377-23fe0c755057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banamexx.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banamexx.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b5fd57-fd3e-5db2-a51f-889cb36efecf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bananagun-io.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bananagun-io.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40f459bf-b910-515b-a96c-4dd049a84843","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bananamex-mx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bananamex-mx.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e84239-1510-5511-bed6-1389e00aee42","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bananamex-mxx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bananamex-mxx.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f4ecb0b-1490-5d4c-aba8-b9d30b79726c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaelectronica-abanca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaelectronica-abanca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e8950a-052f-5c7a-be96-19cffdaef12b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaelectronica-alertas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaelectronica-alertas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--736def45-46bc-58db-90ae-1e9bdace0e78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaelectronica-cliente.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaelectronica-cliente.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--878b5c3c-37c1-50b0-a7ba-40c66849d5db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaelectronica-clientes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaelectronica-clientes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810da4c7-4a22-513c-b8db-f7d1254d542c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaelectronica-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaelectronica-info.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ff6a76-d5f3-56d5-b394-26d5091071ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancannetempresarial-banamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancannetempresarial-banamex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3134f4b-4da8-52f4-83f7-e6b8f54a6202","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancaserfinanza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancaserfinanza.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e412e8f6-ae72-56eb-8ca9-6b61b2df88f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancfirstonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancfirstonline.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9926be33-8ebb-5143-8b27-1772effe2d1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banco-master-ai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banco-master-ai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bacebb7a-aee7-5390-953d-165033af867d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancobaseinet.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancobaseinet.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e550709d-7ee6-5636-a142-42cb799e5260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancokronal.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancokronal.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517a879f-54d1-5959-9192-c046a73e1241","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancor.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancor.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a329c398-0326-5d7f-a1c4-fdefa12c54d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancorpsouth.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancorpsouth.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3002992-a712-5046-aceb-11f6d24042e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancosantander-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancosantander-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c700e40c-56e3-5fa0-b94f-c0fa3e2ba026","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancosantandermexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancosantandermexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--049d5044-437d-5ad3-944b-c21e76172565","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancoserfinanzas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancoserfinanzas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c90033-7408-5780-a0ec-8720bf8cd9f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancusclaimsportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancusclaimsportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--874a46ef-6eac-524d-9578-98de839f1d97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bancustoken.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancustoken.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0813ba7e-9fa9-5aaf-8c1f-fe9eda0ccc49","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bandasolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bandasolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fae09e9b-509a-5484-ab04-77c2d840e5c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bandolwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bandolwin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9438ae9-c8d5-518a-90f8-b7db0597a68b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banerpanel.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banerpanel.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d717d4-2635-55df-8b7a-d4a60d9a2dfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bangercasinox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bangercasinox.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3babcb1-4d13-5000-95bb-1de79976d4a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bangladeshbetting.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bangladeshbetting.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3b1765-8a79-5774-a80f-613e8d92ef97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bangtattoo.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bangtattoo.lat']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d278e4-2efe-5713-ac6b-452c6b9dc693","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bangyoulater.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bangyoulater.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab014e1-9f52-54bc-b3ec-1ca1bc1228c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banitcamp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banitcamp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ec01da4-5049-5fc0-a94b-95921498ce25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banjiokip.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banjiokip.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bef04da-4fcd-5e89-acef-1272899d6122","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankbonk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankbonk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae969dc1-891e-5bf8-9dbc-f04a815372b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankbonk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankbonk.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4518dc8c-d734-5727-8503-0e4977c53222","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankcards-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankcards-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0ce0f2-9e4a-51f9-8b31-70e9d85cccfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankcomatmail.email","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankcomatmail.email']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13044154-8ccc-5e1a-a2f3-9fdab5289cd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankcrypt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankcrypt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ebb206-5def-58eb-9121-1dfcf0ced5c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankerlabs.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankerlabs.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--200e35dd-f0b8-58fa-819c-9ef96f9d96d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banking-firsthorizon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banking-firsthorizon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ff137e-5882-5630-94f0-e92aa95afa1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banking-hsbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banking-hsbc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be62fff8-bb8a-5e1a-82e8-289bf52566ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banking-phototan.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banking-phototan.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed45fad2-eae4-50e2-90ce-3c3106e76afd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankingbmo.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankingbmo.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631803c6-bb94-55fd-8846-0d4def3d4bab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankinglloyds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankinglloyds.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae16924-085e-56f2-b615-1735811e081b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankld-hjelp.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankld-hjelp.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb54011-e0c2-5439-b108-7daaf681d9f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankless-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankless-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fa38b9-e4cc-526d-80f6-70d9cb3f2a70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankless-claimables-0x000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankless-claimables-0x000.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b9e907-442e-5f7b-b62e-25534912f096","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankless-claimables-0x001.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankless-claimables-0x001.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e36f4f-0bc2-58e1-b0b5-7cc31799b247","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankless-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankless-hub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37a361c-f28c-5e47-a7d3-755a6fba2b00","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banklessclaimables.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banklessclaimables.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc1c11e-b680-512e-941e-7e732bd6b5da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankleumi.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankleumi.group']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f665a05-f5ad-59de-bd09-54bff9cff74d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamerica-auth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamerica-auth.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d5013e-454e-583c-9d7d-c323d48f9291","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamerica-helpcenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamerica-helpcenter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf73119-3774-5a20-a541-d40ef848c7a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamerica-infos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamerica-infos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58577ba-dc49-5fc9-878c-1cc72e6572a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamericachat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamericachat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74deb45-23c0-5b4f-9e2f-f9f6c98f7ed0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamericainfo.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamericainfo.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--868608a6-8903-5881-9978-de6d29e96c6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamericanet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamericanet.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5428b75e-0382-5201-af49-72d9adf3c56a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamericaon.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamericaon.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--354dec5c-5a41-5698-8769-694c655e536f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofamericaweb.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofamericaweb.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a547b0e0-413b-563c-9a99-4859bf8f8c4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofbased.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofbased.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c0b0ca-8ccb-5229-bdc9-2c7e6d0bf115","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankofeth.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankofeth.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea46367-a0a9-5c50-901b-87bbae223ab3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankonbetit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankonbetit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aeed624-2d05-5087-b80d-4061329b1402","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankr-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankr-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db25d634-93f4-5388-a5d9-b6f8f1c445e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankr-claims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankr-claims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5fa2bc-6feb-572e-95de-22f95ba00848","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankr.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankr.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--916562d6-5406-53e7-a8ff-12c567af1b88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankrs.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankrs.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5030c91c-4b93-5aa6-b15a-4931cf1a4263","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankstatementmaster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankstatementmaster.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50264760-802a-56e3-8e59-989f8c53daba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banktransfer-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banktransfer-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c31e387e-06e0-5995-8a97-4b56cad0f836","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bankwestsdbk.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankwestsdbk.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6bfb8c-1d02-536d-9493-e2b8e119f0ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banncanetempresarial-banamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banncanetempresarial-banamex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b42bdb-df44-5c88-9297-41c8cdc2cf54","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bannkofamerica.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bannkofamerica.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9e54b0-0def-5773-a0d3-fc8fb0fa3104","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banterraonline.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banterraonline.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c2355-4ece-5247-83e5-6c184b8c058c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banxchange.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banxchange.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e40f781-4d46-504c-a3e0-c267724bf8b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banxrlusd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banxrlusd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--810a831b-c46f-5613-9311-8b9a8f5a32f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banydox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banydox.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b503a4d-2db6-510d-96ba-9e58252faf18","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banzai-bet-pl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banzai-bet-pl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6608b3e3-2d02-5790-af9b-f93bd8842e7c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banzaibet-nepal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banzaibet-nepal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7f6acb1-7438-5ace-900d-2431cfb70c40","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: banzaibets-uz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banzaibets-uz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0daccd5b-ed5d-55d1-9057-d528e32fd614","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baosolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baosolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c03a297-4c19-5e09-a16a-ff097e5be831","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baracudamin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baracudamin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f224a0-27f1-58cb-9ebe-819c4d5e3ed7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barbiebet571.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barbiebet571.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b453b2-4e02-53ca-9458-a321d433c7b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barcelona888-malaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barcelona888-malaysia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1f67438-bcaa-55a9-9324-beac70915233","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaycardhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaycardhelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98a3aac-f49b-508a-8b8d-4d31b6a9b829","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaycardhelpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaycardhelpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5392c795-3e37-52ac-8b5d-72271c55e686","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaycardlivechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaycardlivechat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbbc5bd-0adb-589b-8345-5803a63add83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaycardsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaycardsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c927ee-a2e3-59d9-bb01-72c31895cb69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclays-auth-confirm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclays-auth-confirm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9a3e4e-5a8f-5d20-bcb0-b37135bb9c61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclays-deaktivierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclays-deaktivierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd36e8c-e7c2-552c-8f70-523eca9a99bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclays-financial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclays-financial.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e1e255-6f91-5b04-9fba-5358bbfc1c78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclays-financial.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclays-financial.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67a9306-4fec-5928-b7a3-0a44e934a668","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayschatsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayschatsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdaa8f1a-38c9-5765-8ae8-dacfb31ce8aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayscustomerservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayscustomerservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b525ded0-a6c7-5db3-a819-a512a599cad2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayscustomersupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayscustomersupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24bf0d9b-02ce-5355-8c5e-5a6f997d09f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysfraudsupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysfraudsupport.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f0d7fe-e78e-5900-9354-eecd6f19a23f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayshelpchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayshelpchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c81c386-6bac-5f11-9a2e-0fd7ef9ea37f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysiportalhelpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysiportalhelpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feab281f-a0b9-538d-b6d3-db02a0fad449","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayslivehelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayslivehelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--956f2a90-ef2e-5078-aaba-a00328ffc775","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysmenkuldeger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysmenkuldeger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e79887c-be42-5c1f-8fd0-31127c0ab313","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysmenkuldegerleri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysmenkuldegerleri.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4d5af84-2346-5991-8c26-0071bade6378","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysnet-webhelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysnet-webhelp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa901ba0-1562-55aa-b5d2-01f28dd0b0d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysplcfestgeld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysplcfestgeld.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77ad2222-d578-50f7-afdf-eec2d0804667","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclayssupportchat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclayssupportchat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b04066-198e-58ce-bcf8-1c9f1c9d1262","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysturkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysturkiye.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e075da5-cc42-5821-b80c-03e9aec9c707","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclaysverifycall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclaysverifycall.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a413ea09-ab58-5366-ac4f-29bcfa1e0bef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barclinvehicles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barclinvehicles.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--266de599-3f74-5d67-b793-f771ab0ee714","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barcode-hive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barcode-hive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbd28e3-d7f6-5b63-a993-04b545014c7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bark-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bark-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--595fcdcc-13e7-50a7-9652-9de2eb46a3cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bark-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bark-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57cfac0e-d06b-5128-a0e3-01671be311ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bark-presales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bark-presales.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b21106-7a78-58f3-b016-e66e1499eacb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barkingpuppysol.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barkingpuppysol.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6265702-52cc-545c-bbb2-dc37b3dabbbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barnquiltsandmurals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barnquiltsandmurals.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16778fc-eecb-5729-af50-863ed55e0580","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barnumcafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barnumcafe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f425dab-2488-566e-a059-349e71a2d7de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barossawealthwick-ai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barossawealthwick-ai.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73aeac43-12f6-5051-8ec5-a286af3129c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barrerasolanavazquez.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barrerasolanavazquez.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3619bffe-38e9-5c46-8ec5-c27aad3a00d0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barrieregamefr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barrieregamefr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5366dc1e-0a0d-5b44-a7fe-1ab47a0a1649","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barrosuon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barrosuon.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0abe0ab0-3794-512a-813d-e8c1a69e4507","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barstoolsportsi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barstoolsportsi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3565d2e8-3c97-580a-910a-9e914b435000","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barstownocturne.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barstownocturne.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34cb851a-3bf6-58be-a3b9-d6ec845b6fef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bartoli.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bartoli.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a7813d-a52e-5961-8c67-352802b24361","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bartore.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bartore.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc545f5e-fcd8-570a-98b2-151cca048c70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barz-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barz-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a4719c-3f34-54cb-9139-38782c7d5a66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: barz-casinoss-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barz-casinoss-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b6d59bc-0b9f-5426-80f9-80dc52600bfe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basduno.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basduno.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a49d49-e018-5bce-9d2c-1ea312ce6c8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-82136.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-82136.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57ce33dd-8e3e-5bc4-a62d-ecaa73520eaf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-aave.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-aave.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb5f2d9-9792-5237-b7a8-60d696cb8b02","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-bridge-basebridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-bridge-basebridge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a158d5d-87c8-57fd-8ea6-7b893896e9e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-bridge-basebridge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-bridge-basebridge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee36ee16-435d-5968-95e4-4e75580d4e5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-checker-gray.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-checker-gray.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f23647-45d9-5245-9c0b-b5ab77589913","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-circle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-circle.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebffa03f-7f65-5455-b0f2-eff38af0aa4b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-dappradar.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-dappradar.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b02a088-c1ee-54c3-8c6f-ba424fea6366","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-dapprader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-dapprader.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d80973-3dc6-5d43-b937-4d9794d48db3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-dashboard.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-dashboard.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acea9abd-adf7-54eb-9548-3699855b2b2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-dashboard.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-dashboard.run']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea336c1e-8ad3-5aae-b430-06a64c4e89ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-enlinea.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-enlinea.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5262d32-3a11-5657-bbae-8cf1f2efd5e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-farming.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-farming.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2cd07a-0859-5d70-945f-4f1c3dd07d74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-guild.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-guild.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3243b8a-7a21-5a59-b954-958c33bff7ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-kekius.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-kekius.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a0154c9-d090-5053-8d5f-c3a476ae61bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-migrations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-migrations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74ea2f06-a619-5151-b41a-8af30f092ffd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-ondoproposal.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-ondoproposal.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65e324e-b755-55bb-8536-d3720f99d9bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-passkeys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-passkeys.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25af08d4-290a-5794-9057-927058c84b93","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-pay.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-pay.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748a1717-ad82-5a16-b36d-b679daaa42cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-pool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-pool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c0e6abf-218f-5588-ae44-c85bc38730ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-reg.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-reg.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef71f2b-d9c2-5a9e-8c83-8c5612fa8022","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-spacex.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-spacex.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22849793-b6a3-5414-a986-90187c46369f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-spacex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-spacex.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7984caf-dca3-5f09-a61a-b915591e86fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-supportpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-supportpage.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9228b00c-08cb-590b-98a0-e613c01f714f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-swapvoucher.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-swapvoucher.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de654467-d9e3-5f4e-81a1-75f8d3676476","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d84f649-cdb9-5ccc-82c4-19ce979a6057","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-tge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-tge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed63498f-bd2a-5042-8a19-4486772ba3de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-tools.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-tools.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b008a2c-b528-5e21-bcbf-5f807f3a303d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-uniswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-uniswap.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0586104-dc2b-5cba-bff3-f3398ccc83b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-update.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33cc0646-a368-59e8-b5ba-dcc2720963bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-updates.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-updates.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de19289c-ff50-556b-80b1-d56adde0e62c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-upgrade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-upgrade.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e25acbf-270f-504e-b51c-c5d38d03897e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-upgrades.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-upgrades.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--503cf236-8ca6-5e53-ab99-17542c522384","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-wallet.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-wallet.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c9d523-892f-59cf-9997-2147e446b0a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base-ye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-ye.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--200e7287-be7f-5937-a1c2-434b855f6b5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45ce2fde-68ee-501b-beed-07f13bffab61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base.reviews","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base.reviews']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42fd3e2-18fa-57f2-b811-72522ec7345b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base1-swapvoucher.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base1-swapvoucher.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f1b208d-6ec1-5fee-a6f8-2ef528f1bf68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base2-swapvoucher.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base2-swapvoucher.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d242f5-8599-51d1-8ea1-77e13d28076c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base2fareset.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base2fareset.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32e2b42a-222d-517a-8527-ff023cea9529","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base3-swapvoucher.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base3-swapvoucher.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c935363-84a8-50ab-ad66-6372ff838348","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base4-swapvoucher.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base4-swapvoucher.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d1af817-46de-54f0-a8b2-f403b7511349","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base4asset-advisory.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base4asset-advisory.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ace1fc-bba6-59bc-acc5-d47119c08cc7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: base4asset-advisory.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base4asset-advisory.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2817578-76c7-5445-959b-aa4f00852ee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseaerodrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseaerodrome.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--838cfb98-0d79-50f6-8bb1-e51706be4ba9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseapp-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseapp-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a318015-0cd7-56c0-8117-623fa29bbf19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseapp-home.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseapp-home.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0af356-9d7a-568e-8f59-485fc8bf055b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseapp-vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseapp-vault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd76b0ec-fa6a-509d-b18e-ef08ecaa377a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basebackup.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basebackup.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d797007-c5cb-56c6-82e2-06b5c0c5ab4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseballareakr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseballareakr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1c0a4e-8887-50a1-bc17-925dd95ee537","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basebridge-base-bridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basebridge-base-bridge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73dc03e6-cfd7-56b9-b8e8-407bba897fa6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basebridge-base-bridge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basebridge-base-bridge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db642bf-0f68-5bf2-a1fc-8e44e4c3e53d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basecefopep.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basecefopep.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88d09edb-6947-547e-9036-aa57dda61bf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechain-fnd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechain-fnd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e612168b-a005-5b66-b048-376db3058b8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechain-tgelive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechain-tgelive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b10bf986-d339-51ba-ac33-1dbe1598b3ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechain-tgelive.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechain-tgelive.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69606645-b00b-50a8-9b9b-24a33bff2960","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechain-tgestart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechain-tgestart.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7076a928-8d33-543c-b62c-e9dbad17f858","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechaine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechaine.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ac6af33-4588-553d-addd-755b0b45123c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechainfnd-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechainfnd-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4400d60-688a-5895-b4d1-d6534c55e31e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechainfnd-tge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechainfnd-tge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf32bb40-d271-58ec-bb73-4caebb4c6487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechaintgelive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechaintgelive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c5293e-bea3-5cce-942b-56f26d281394","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basechaintgestart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basechaintgestart.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a09c8ee-a706-5231-ac75-227c978d8f21","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basecoins.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basecoins.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d7c23d2-45fe-5584-b5ea-3ec04e277fa3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseconnectionsdashboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseconnectionsdashboard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06c3149-6cfe-5a80-afae-64236ce4ad31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basecontractdashboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basecontractdashboard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790b0c38-45f2-59c0-91e6-c30c24e6e8f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basecpf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basecpf.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bbea7a3-fa8c-55cb-9de9-f3f17d3a6bc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basectofun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basectofun.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33865d15-804c-529c-af51-683b65577d70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-app.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-app.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e11b54-f6ae-59ad-802c-db266614f5e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-auth-sphere.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-auth-sphere.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a04a0b6c-cb1d-5639-869d-f7beeb811aed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-fabric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-fabric.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5b374a-40c0-5a9b-9fc0-060916788ed8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-kernel-orbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-kernel-orbit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b099098c-3135-5de0-a6b5-5d5e865e89d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-nouns.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-nouns.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c44ef1-bb34-5545-854f-c442877e6de3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-spectrum-field.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-spectrum-field.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9d0e7e-a05a-5d52-bff7-c50315e050eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-trade.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-trade.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cec7ef-302e-5ae2-b455-73b5f03596d5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-vote.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-vote.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6141b6b-f2cb-5145-9dc8-4bf073d6f49e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: based-voting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'based-voting.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e4ee2d-5616-50ff-b796-166c2420a000","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedaifoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedaifoundation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dcc50c-d6b4-548b-a2b0-e988f048ae33","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedaifoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedaifoundation.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b289dc1-7f18-56a5-bd1f-2d72c65a89ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedapp.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedapp.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27bec012-ed40-58ac-81a7-c7ca54be8a92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrett-claims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrett-claims.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4791260-45be-5721-92ae-31f63c4b773b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrett-claims.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrett-claims.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46bc5bb8-b914-5a10-8e64-c5c1f5c8eb80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrett-events.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrett-events.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a77400c-d415-539d-8f2a-cac3e8ef65df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrett-mail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrett-mail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00403209-a6b0-5545-b43b-cc849e35f738","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrett.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrett.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b1ecbdf-b627-582b-8e28-99b3fed7e831","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrettclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrettclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69444307-3a4d-5858-80c2-4e6e24d93746","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrettmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrettmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fdb9783-efd8-5e0f-b1c2-37c6da704b46","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrettr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrettr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a848d5-3382-54f5-92c9-a175c30a8215","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrettsecondwave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrettsecondwave.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d670148b-422e-5d71-83ff-760d3371f1c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedbrettwaverewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedbrettwaverewards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e0c54c-38d0-5db1-aced-af3b111c83d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedchain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedchain.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c84cdb-87b0-5565-99db-71b1b95a4f05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedchop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedchop.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50611681-451d-5c95-8d18-6c0c3d0729a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseddhouse.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseddhouse.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74b7c85-c0bb-5448-b508-c8cbdf270976","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedfartcoinclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedfartcoinclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d0aa3d0-625f-5def-8028-da9331899c7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedfnd-voting.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedfnd-voting.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3626daac-064c-5904-9ef7-d67e142ac526","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedfndn.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedfndn.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be61eb9-81e4-5902-8b0d-f7ce4359e1ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedfoundation.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedfoundation.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e268fff-1a13-58ec-84b0-b0effa539110","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedfoundations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedfoundations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709b66c9-d995-5f6f-a96b-eaab5ecb06ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedgov.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedgov.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75388ca-c2f0-5d13-ba56-43f873ba545d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedlayer.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d66de3b-fddd-51ab-acb3-aa493e03d90a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basednounsdao.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basednounsdao.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da24e454-758a-5516-84b2-2bacc5defa96","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basednounsproject.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basednounsproject.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39338b7d-908a-576e-93db-06705ad416ec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedone-app.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedone-app.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78e725cb-0b08-5bad-a134-e189910de889","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedone.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedone.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a470d77-d77d-5f5c-b001-83d5712584ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedone.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedone.team']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--005a1204-5319-5c1d-9204-bd44d2a1a562","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedprotocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedprotocol.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163d63f7-9de4-50f8-bd2f-e193d0721fe1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseds.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseds.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1510ad8-2d0f-52d1-bf51-e4e733ffe5c5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedstreams.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedstreams.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8b6d3b-a79f-5cc0-b1db-4305581c6b9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basedswap.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basedswap.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b864a3a4-41fb-5c5d-a91e-50f7378413bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseeduat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseeduat.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879c349c-7aa4-51e9-8d55-ecf53d4761fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedube.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedube.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97967455-2bf9-5f00-828b-e65f3c3e703d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseeduch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseeduch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2da7473-9f21-551a-aeb5-5efbae2f072d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedude.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd6fbb1-69f4-56c4-8083-35c4a9232d06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedues.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedues.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43bcd50f-5034-5654-b361-d55c18beef76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedult.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedult.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--366ff953-5c18-5953-a83d-67431504f7c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedunl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedunl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60d52be-9211-54ac-9344-4b11c7c73dd3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseedupt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseedupt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed61da8-e946-5ee2-9406-639660ad0525","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseenjibase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseenjibase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d1608a-8224-516d-9a86-bf22480de177","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basefastbitl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basefastbitl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac402a8c-05cf-5748-b9aa-a6fde8d4f4bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basefdn.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basefdn.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452e52c7-f624-59b2-87e4-8e1f81062d1c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basefdn.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basefdn.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95bd2eb0-915f-57f6-b4de-db3d3169cc6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basegodpool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basegodpool.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1779743-a30a-5994-9652-f9e759ebc82a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basegodreward.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basegodreward.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ae061c-b237-59b9-a927-87798fbaab90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basehitfantasy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basehitfantasy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99866d8-371f-5b7b-acb9-4c33bc337cde","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseinet-mx.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseinet-mx.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3fe5e5a-3630-5a37-bbd2-dbb9132b35cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseinet.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseinet.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55793b04-d7ab-5d2a-b951-c143f9608060","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseinet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseinet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9b85f9-81b3-5811-9838-197fe5c2607d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseinet.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseinet.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f387252-fbda-5c9f-9603-83ccdd69832a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseinet.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseinet.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c42258b-28a0-51c7-a6b8-ae9368196365","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseirnetweb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseirnetweb.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df9669f-fa3b-56de-be6d-71b5d8b4a65a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseleak.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseleak.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41f180b-0c2b-5a88-b3a9-a7da9ee09d1a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseleaks.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseleaks.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd5dd021-4454-535d-a916-af8039d00ee8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baselive.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baselive.tax']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7138bc15-d3c2-5261-8b3a-3a20110d7334","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basellnet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basellnet.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--892afa41-cba3-5029-9ec5-750f79b4d5ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baselnet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baselnet.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09578909-452a-52b7-adc3-2b53cf3df447","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baselnet.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baselnet.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529e2a73-9f19-5387-9100-6bc2e0abdf6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basemintnft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basemintnft.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4723a40a-b61f-50b8-994a-1f9670e34029","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basenetwork-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basenetwork-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2701256-2ee7-5fea-8971-6ebf56885b80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basenetwork-tge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basenetwork-tge.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f50a5a8-d094-5722-a741-f50eb45d3a41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basenetworktge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basenetworktge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d3bd5d-4e02-554d-80d3-8580ac79a76c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basenji-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basenji-claim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae838e7a-d3bc-5c34-9e5f-0ddec75f90c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseochain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseochain.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f258e416-ed3a-5c4f-b1ee-746e4c1580db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseonweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseonweb3.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca09017-567b-5c61-bef8-189c438254b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseowallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseowallet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df246241-a4fc-50c4-bb23-aaa1aea6d243","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basepay.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basepay.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bb21c90-8272-5152-9c74-1a790af8fc08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseperp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseperp.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5adf26f-3db0-5c27-8982-1095e3cb7a5d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseportal-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseportal-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ad0c6b-5c35-5568-bc32-e531c53e5c17","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baserecoveryportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baserecoveryportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8e6486-49f5-5568-9c71-d266a2a22659","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseresal.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseresal.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad63bcd4-7706-5267-b204-cc429c1c2e53","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bases-renewal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bases-renewal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1290199-c3ce-5729-b5c5-c3ce4b05cbb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basescan.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basescan.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3274c3dd-b13c-5128-9348-62fe4f1baca8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basesecureonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basesecureonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96470068-06c6-556e-8902-a682d650c2b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseshield.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseshield.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c3d5b0-0078-577b-9015-0cb7df9eef8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basesolv.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basesolv.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b08ec11-152c-569a-a13d-b7d1bd78f43f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baseswap.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baseswap.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed2cbf2e-4101-5a54-ad17-96a349fd8877","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basetax.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basetax.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ab0768-7e8f-5286-ae5f-63dae8107f10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basetools.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basetools.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdad335-c46e-5345-876f-0e3218a1e708","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basevault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basevault-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b544a44b-8f2f-526e-b57c-81514a777148","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basevaulting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basevaulting.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7213819-439e-57c9-935f-b8b1496e1fdb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basevol-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basevol-claim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4db113-e54f-58bf-8208-a048abc0225d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basevolumeras.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basevolumeras.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb7a5c4-ae41-5175-a73e-8c7b3a9f637f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basew.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basew.ltd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab17e75d-7af3-5412-8371-3fa1fd1fad3a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewallet-desktopapp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewallet-desktopapp.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6843c28-f88a-5cb3-a9ea-4e11fd45cc9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewalletreturn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewalletreturn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8974be4-8ab7-55f5-83a4-860071ceb8bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewalletvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewalletvault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb00986-40fd-5a90-8477-fd6156e69dd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite23.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite23.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05b4da0-9614-5b02-b851-1e6f849b7e78","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite24.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite24.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc62271-73d8-5f07-b56e-5628c4008ff1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite27.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite27.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb61c3ef-5bf2-5f6b-ad76-4d71120a8e83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite28.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite28.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58443dfa-8f33-5325-a399-e1792ef78707","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite33.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite33.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba62c3f7-7dec-5314-93be-d8c9a479468b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite35.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite35.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2dcd9f-40db-5a95-be39-b213f775cf7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite39.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite39.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c2c41cd-e10d-53b8-b995-c747d9868502","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite40.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite40.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--178f2a65-72c2-5313-b72c-7fd51dea1866","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite41.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite41.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a13b6566-455a-5020-8578-85943394d10b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite42.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite42.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f77b3d9-8976-5bb5-bf61-b5418bd4f354","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite44.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite44.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--957eafa5-0200-5718-ad89-a9c81117bf8b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite45.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite45.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed0b095-2e04-528c-80be-18251e4a4efc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite46.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite46.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d14df7-6dec-5ab1-9da8-98eea7717e75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite47.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite47.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f43e46c8-c2e3-5618-8730-a500260feda2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite48.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite48.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75aa8c0-f7f6-518e-a957-b6b8be8d4b82","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite49.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite49.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a80c5776-dac8-5f07-a015-4e9bb31fe413","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite50.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite50.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16142d68-24ed-5c77-8edb-41fd4baac5b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite52.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite52.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeba100e-4bd7-53fc-afaf-2fed44830106","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite53.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite53.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9b18cc-3d0e-57f1-bc50-3add1e1cbc73","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite54.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite54.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a502a907-f4b8-573c-ad22-e6a6b24fefd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite55.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite55.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ba329b-d3f7-599f-b884-51825ea1d4ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite56.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite56.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--621f37ac-b0ad-5122-863e-87e8b2000055","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite57.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite57.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0959b625-bdd5-50a0-8be3-a08d713203a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite58.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite58.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fb1ab5-33e1-5be3-b887-3af55f41bcd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite59.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite59.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--603a95b4-475e-530d-b901-1cd49058f6c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite60.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite60.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13aa4cb-5c11-5900-a028-0320dacf7fd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite61.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite61.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b048fb4-e04b-5c4c-a92d-baeb4375ea35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite63.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite63.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af4466e3-11d0-5e12-99f3-5f6f3abed7a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite64.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite64.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--844dfad6-f16f-52dc-950b-b1ad238d67cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite65.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite65.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d9bb77-c1d5-507e-99b3-efa29da41621","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite66.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite66.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a98a28-ec25-5b1b-98b5-352810a631ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite69.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite69.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3dc796a-93d1-5ef2-b643-4bc82213815a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite75.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite75.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e68a75-a0cf-5e73-9cac-230afc321f0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite76.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite76.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5855a45-7a7e-578d-835b-c9ee232e8044","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite77.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite77.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f951c3cf-6c6e-5d0e-8180-66468b2a3136","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite78.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite78.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba54c43c-c85b-559b-9bab-cf845cc93766","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite79.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite79.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed39a1f-8ca0-5e6e-8637-a22644352549","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite80.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite80.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f27141-98d4-51c0-a689-84d37df40eac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite81.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite81.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f2a77a-c279-505f-bfdf-cbab50ad49db","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite82.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite82.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c6f52d-d1ba-562a-9ec3-7daa58189fe9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite83.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite83.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6ba8b4e-9222-5de8-abb9-541b587d0529","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite84.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite84.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4883dd46-c609-550b-90c4-2dd321b5c14d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite85.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite85.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e49e7b0-70c9-590d-bc89-a38a5259d078","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite86.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite86.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cbe0c47-7097-5958-8587-03299daf3c59","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewebsite87.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewebsite87.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc424b3-8f65-55f8-bca8-35eafeff7731","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewithvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewithvault.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab06450-edac-5ccb-83a5-2378191f1940","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basewot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basewot.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--672e4c0c-6aad-5e90-a9c9-f7d82d855674","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basezero.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basezero.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab18dbb2-249d-51be-b3b7-e5d88c448888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basicattentiontokenclaim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basicattentiontokenclaim.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ee997c-03cb-54fd-b20f-c0a34ece4643","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basicsmaart-contractt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basicsmaart-contractt.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f733b9c-936d-5762-8b18-1ed95b87cd71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basicsmart-contracts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basicsmart-contracts.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee206eb-1d68-54d1-9697-b75b1d334b8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basicsmart-contractt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basicsmart-contractt.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17cb34d-748c-5921-8b90-10f40dc60115","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basictechadvice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basictechadvice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46787da3-e1e3-5e3f-ba11-9bfc64e62d51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basis-invion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basis-invion.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575ff558-9c0a-5d4a-8afa-06d5148d9951","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baskakova-exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baskakova-exchange.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6da97bef-6810-5234-a5bb-b3790b75853e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bass-win.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bass-win.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6d3b02-e77a-5564-bb7d-f0dcdafeb45b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbet-casino.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbet-casino.online']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fed83a0-7b22-56e0-bb29-7d5b55c83dad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbet-pl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbet-pl.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b7d7c6-51ce-5db5-9819-3834b6da61a8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbet1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbet1.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67480e2c-beec-52f3-be12-53adce7604f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbetcasinode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbetcasinode.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8714f5-2299-535e-831d-92a115554ff3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbetcasinodeutschland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbetcasinodeutschland.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9201697-4458-5464-a646-3954d40c6076","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassbetgr1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassbetgr1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50f6adb-1d9a-57c9-afeb-01d312519be5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bassiani.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bassiani.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee61d51b-779e-59ad-b2ff-82bd9cd304de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswin-uk.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswin-uk.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b2bf69-8388-545f-8a46-4325a91e9a0e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswin.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswin.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed3272b0-43dd-580c-90c1-48854188f973","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswincasino.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswincasino.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c7f63d-7875-5832-969f-c9f0e1ff07a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswincasino.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswincasino.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1ddb8a9-46a1-5735-84ba-9cdd3077b899","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswincasino.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswincasino.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5c0eea1-f1b5-50fe-b3a3-90c223c96edc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswincasinouk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswincasinouk.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa8194d-fcb1-56fe-8d0b-413bac3da36a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswincasinouk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswincasinouk.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab473805-deda-5339-ab04-34ef4d6d1ff1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basswinuk.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basswinuk.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caefe395-5b58-5789-a17b-1b4f6a755158","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bastacasinoutanomsattningskrav.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bastacasinoutanomsattningskrav.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efa7b19-6cab-5977-bd09-cc6d6f9f51b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basular.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basular.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9463ac6f-1b5b-5afa-afcd-f31fe54cb29d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurbrd.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurbrd.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc80e303-f733-5e04-8705-0fc52005ff35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurrvn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurrvn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a2c6ce5-5ec8-546d-afbf-8e3599176b35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursenc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursenc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89254d37-00b9-534e-b7ea-6d9b898dc868","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursend.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursend.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26abd883-738c-5f06-b432-c8e9a4783737","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendmr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendmr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adab6916-f01e-5f7c-bb92-ac07d9dd93ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc875d0-da2b-59a2-854f-756ffbee189d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendsc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendsc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a85f5f-b274-5585-af81-d4caa41cb25c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendsmz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendsmz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d4535e9-98d8-57f0-8629-c2a8574023fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendsn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendsn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e58982-51a3-5059-bb51-e79aab97f81f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendsr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendsr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28183764-43ef-58e6-a7b9-8e658411885e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendsz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendsz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f3d9c4-81a2-56e0-bb2d-e33ddf1c05b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f13a753-b6ba-5f3c-afcd-bc16a573ed36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendzk.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendzk.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75caa33d-e690-5a5a-abf8-040d730c027e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursendzn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursendzn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70472765-a6f2-578a-8ba5-dd6578746773","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursenn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursenn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f26364-0f82-5807-af6b-86806bdb9dbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursenrnz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursenrnz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e19633-8713-51ae-b939-b5ca5fac6431","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursens.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursens.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3082eb71-ff70-5d7f-b477-a917a4afd132","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursenxm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursenxm.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dcd3596-2c8e-56bd-af09-1bfaa129136b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursmn.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursmn.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de005a9-e837-5590-a7a3-19a2c10d3b0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursmz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursmz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d06d10e1-5c70-5a5d-8dba-f0d74e3e8fc1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursnr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursnr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb2eab6-8997-53a9-817c-130dea082ae7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursns.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursns.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94100df-21f1-5fde-bda4-cbd4979f929f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursnz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursnz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e730cd4-2df8-57ea-ad1e-70a0fa1d03ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursrc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursrc.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49bcc9a3-98fd-56ad-9076-12513841f0f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursrd.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursrd.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b096a8d-fcce-5201-a6c4-129b34c4af9e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursrs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursrs.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ff7263-4c17-53e2-91ab-a2dfd0b434a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursrz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursrz.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a492555-1eea-57d6-8f5c-9a3427922c71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursvm.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursvm.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1cee0bb-2e40-5e26-8193-8265bb7aabc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvursvs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvursvs.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53eee0d5-5d0e-5191-859e-ccecddb72f88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurszr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurszr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053f9bac-9aab-5847-9ea0-0085a285e7b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurtokiye2025ekrani.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurtokiye2025ekrani.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04813ae3-935e-5b80-bf84-7f0993a053f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvuru-giris.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvuru-giris.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fca9dce-e2dc-581a-a7b9-8643fe2174ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvuru-kontrol.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvuru-kontrol.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a375b09-d6f6-524a-b662-291c28b0c997","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvuru-merkezi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvuru-merkezi.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2629c7c7-bc1a-5147-b5b2-d53d35ececee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvuru-talep.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvuru-talep.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f132eb-2aa5-5aae-9182-f95b318d2806","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurufirsatim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurufirsatim.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c50708-1e11-5728-a1e8-2cf179375384","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurularbasladi500.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurularbasladi500.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de77b26e-203e-54d2-a301-be607f98251c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurunetekrani.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurunetekrani.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a3c044-8736-52c8-9651-e29bdfd4f33f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurusponsorgonderisi.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurusponsorgonderisi.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36485cfe-0254-5713-ad82-96b14779c2d8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurutaleplerimizfirsatta.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurutaleplerimizfirsatta.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--247769b9-5e4d-5a1c-a3ae-41646f4ba3d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvuruyap.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvuruyap.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d66f725-dc89-57d4-9aa9-5cddb60c6910","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: basvurznr.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'basvurznr.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5f79e5e-ac01-500c-b3f8-096cce0f2315","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baswin-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baswin-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4437e8-da9d-52e1-a1d6-81a66869e92a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batch-firelightfi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batch-firelightfi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4559417d-0852-5ca7-b728-197312342b9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batch-xrpl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batch-xrpl.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3db78c3-5957-5a89-a75a-235561413108","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bateubetbrazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bateubetbrazil.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdf297c4-8343-56b5-a4d3-3655c59c6162","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batmanvip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batmanvip.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb992a2-aea5-51b2-a200-bee1d79dc68a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batmobile7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batmobile7.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--867fdd28-f186-52ac-9ca4-cfabd751de92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batongame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batongame.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65eed13d-5d0b-5ead-b148-56173330cfd7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battecase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battecase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--765327f8-4fe0-55bb-9809-e1cb9de7e668","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batterycasino-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batterycasino-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f8cba3-a5e0-56c4-9b0b-d3c98bc2feb9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battinglegendswin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battinglegendswin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8502490-bbac-5619-9df3-f6c18c1dbd26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battle-case.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battle-case.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f2cd23-e4a4-54e9-81f2-e676ee147206","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battle-case.red","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battle-case.red']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a73713-0574-5d82-84ee-a748b065bb58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battle-history.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battle-history.ink']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0240a37-72a2-5c87-b78e-3a402ab3a3af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battle-squirrel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battle-squirrel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3717ecbe-c6ef-55c9-aaf0-e84f06c08a7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battle777pg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battle777pg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fe05d7-a7ee-51db-a5dd-c8b93f70ccfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battlecase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battlecase.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd1aa953-bb13-5d83-a45e-a8601ae352e6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battlecase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battlecase.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0a4c73-62fb-5416-9395-457c31645c4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battlechickenarena.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battlechickenarena.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a282b05-6f88-5967-a5b7-e071e1d778c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battledance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battledance.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1985489e-da06-5c0b-9b25-5da1badca153","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battles-case.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battles-case.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dfb950a-7869-5303-83af-8b9189167703","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battlescase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battlescase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18683566-f542-5dcc-b470-8a706eca9093","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-citadel-pipe.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-citadel-pipe.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f647d78-ffac-5fa5-b9b5-391c987ef6b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-connector.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-connector.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec555ff1-6a07-5d84-b6a5-f96484438f55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-escrow.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-escrow.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c953d9e6-9018-5a3d-a9cb-5e867dcf6592","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-keeper-radar.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-keeper-radar.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9252fafe-0161-5416-a5b8-4296ed6a897f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-proof-scan.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-proof-scan.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f66b0222-a980-5378-8402-eabfbf26be58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-register-flow.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-register-flow.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2a67b0-2e8b-58b0-aaf9-5733cda43ae4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletested-shield-grid.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletested-shield-grid.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c033ee-6f9f-572a-9706-26896ea1b744","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battletestedbunker-control.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battletestedbunker-control.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a337b3a-8188-5d41-9ad6-4dfb24bb45d6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: battllecase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'battllecase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9efe7b7c-9823-53db-8c94-5f962c10cd9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: batummslot724.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'batummslot724.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce80d460-da66-5124-a009-a8ce7ed5b1ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bavvibo.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bavvibo.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--793b0482-688e-5c05-8dea-c48fc263f952","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baxit.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baxit.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbf2fb6-cc3c-57e3-a4af-808c6db49ba6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baxkpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baxkpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcad9fa-915c-5aea-a15c-a70b2e67db29","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baxtercreekranch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baxtercreekranch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--553ca346-028b-5486-a2e2-7d09f63cd0b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bayareafastraktollservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bayareafastraktollservices.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8be1af6-cb0f-5d0a-856e-3e9aef1253af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bayassetholm.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bayassetholm.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f84132b-a26d-522e-bff0-ad7fc4d542f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baycasino345.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baycasino345.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72a68534-f7ec-5a8c-b2dd-9e7d8d3fa524","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baycasino346.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baycasino346.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba61b68-1fa3-5ac8-98f1-eb796f3595df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bayconticasino-yeni15.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bayconticasino-yeni15.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c784039-e9ac-5e89-8601-8eaed9b1d60b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bayfarmz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bayfarmz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f491b4b5-4844-5c64-a06c-718c14626617","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baysedlaboratory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baysedlaboratory.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2de570f6-1253-5a8b-9305-e9fb3e379fb3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baza-gibdd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baza-gibdd.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5cc52d-2501-57ce-8e0f-ce9a94d98680","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: baza-spravki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'baza-spravki.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6bcab61-f47c-5912-b378-099e459f5873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bazi-enfejar-hotbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bazi-enfejar-hotbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0c4068-8f8c-542f-9283-76c396f3e3a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbackpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbackpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a76253c6-cdb9-5ac5-bc12-01a21bb818a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbase.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbase.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d443bd-c4a1-5909-b1a2-2b33255cba13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbasedash.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbasedash.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab98c8a-5326-50e2-b13e-7f9ccf56272c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbaseinet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbaseinet.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9c9780-df5e-579a-a97a-6c55d9b6f7bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbc-world-news.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbc-world-news.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffc48da-2ff4-54f8-8e35-710af249a504","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbclub.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbclub.mobi']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee10d862-e9dc-523c-8069-4e88541c337d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bberachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bberachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ac0d43-6fe9-5ca5-86e2-8a4108a73fbc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbh-client.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbh-client.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3bb32a-06ea-541a-a0fc-2f654c45dd1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbmarkett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbmarkett.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2ef2ce-9d21-5d4d-9a17-e40a0cfa7722","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbmoney.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbmoney.top']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4438d235-4d98-5bed-8628-4c4bb8a2cb98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbonkredeem.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbonkredeem.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--865e5f11-4540-54ef-a62e-48eab40d34f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbox-suivi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbox-suivi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e23904-4483-5a4e-b461-76540f352c58","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbpupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbpupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d018f24-d9be-5a3b-8c58-4630ee9169ee","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbqonsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbqonsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--511e26b0-c1d6-5589-98a5-4708aae238e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbr-bet.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbr-bet.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dac0a72-7f61-59f6-b044-b01c158623f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbrbetgamesmexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbrbetgamesmexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ecb0fd1-3812-522f-81e3-b5c3bc920df9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbrbetmax-cl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbrbetmax-cl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b36329-18a5-5fea-a3bc-946cee6804be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbrbetmxi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbrbetmxi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9080385e-2594-5f14-8457-7788f43bfe69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbrevis.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbrevis.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a61262f-a5fc-58cb-becf-6123d7ce607c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbshop.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbshop.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dce6f0f-d171-596d-8691-51af70db10fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbtk0m.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbtk0m.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cfeda2-636b-573f-a393-a228f609196a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbuamexico.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbuamexico.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84118188-6824-55b1-aba7-5927c06506e5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbvamexicosolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbvamexicosolutions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4123ffa8-3a65-5616-aa0b-799501ebaa89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bbwyomingllc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bbwyomingllc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--235b318b-7866-5280-b775-cee9ee0ee033","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-casino-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-casino-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af3b11ec-1db6-5b02-b075-7a65f126a56b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-collab.land']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--928ab09a-31d8-5f6f-9958-908e03c27907","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-game-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-game-es.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2796003-9f78-5575-90d4-8f368ecdd81a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-game-india-online.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-game-india-online.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb296250-28f0-519e-846f-e68ffbd1bf2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-game.fan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-game.fan']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2837c27-8fa7-5a2e-89c3-b8623920df36","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-game.video","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-game.video']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--782b4648-9dbc-508f-9939-7e1f1b7b481b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-games-casino-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-games-casino-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44fd9a37-e295-5960-8dd4-87c056894ef1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc-wise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc-wise.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e647f5-7e62-5e0a-a965-9070312b273d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bc2.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bc2.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e0c54a9-dc04-544a-8a15-0ffc3a2c6793","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcakpack.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcakpack.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57ddab16-3873-531a-a4b5-123b6cb7cbfa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasino-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasino-ca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf9fc6a-85d2-552d-8dcf-f37da3f218f0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasino-new-zealand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasino-new-zealand.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97adf90-3391-50eb-bfd9-cf4b962c50d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasino-online-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasino-online-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700863ce-83ae-5361-8bf3-81bf6dbb35e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasino1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8469339-979b-5762-b021-3e30aeb45a27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasinomexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasinomexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08de89e-0b1d-5369-8191-575242e4c241","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcasinoonline-new-zealand.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcasinoonline-new-zealand.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5a69a7-e145-530c-b7a8-ce57af83541a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcbzxgfseekingaberration.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcbzxgfseekingaberration.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--132f6582-f242-572a-bebf-d43b300d538a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcckinq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcckinq.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f3a9ee-7a78-5448-851c-305409be72be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bccrypto.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bccrypto.club']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e605b2-cc02-519c-80af-7c2e9eb90d6e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcgame-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcgame-de.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a7c711-3028-5753-bc13-36e5789c1089","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcgame.video","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcgame.video']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e24951d-2582-567d-bbd7-e624beba412d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcgames-bangladesh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcgames-bangladesh.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--360b3c0d-0894-5350-b018-37de9a2aba57","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcgames-ng.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcgames-ng.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4984cf8-d9b5-5b3e-8e3f-badee63be124","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bch-casino.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bch-casino.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99008f8c-7fe9-54bb-8f3b-d9e417d89cdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bchampxrpl.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bchampxrpl.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42a0cc91-102b-53cb-88d0-2d59f2b9168e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bchgame.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bchgame.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bb1a66-b2b0-5f81-868e-319bc210b596","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bchh.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bchh.games']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f924d300-944a-558c-9615-16c59edd0f88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bchousingclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bchousingclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad07822-c03b-5699-a0d3-7283c063c957","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bciub.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bciub.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420ebc5a-4728-5338-a8ec-d606d151a942","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcjapanbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcjapanbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09620d7d-b5d8-5645-abf0-9b957e742239","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubbcm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubbcm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deaa5e91-a40e-5781-a166-e9501d4f1970","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubcc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubcc.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9946362-2377-5cdc-98a2-571a4e145e35","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubs-tk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubs-tk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f4e6c7-31ae-512d-8099-562a8d9bf12d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubs.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec77e644-9f0a-5023-8730-f82e8e88c7c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0db4a29-6dca-593e-85ab-dfb5256172c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubs.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28f1761d-7146-50d8-9382-d2709c16dc89","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubtk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubtk.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc7f5a64-64e2-5e2b-acca-a44cb1c11f4a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclubx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclubx.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d3edcf-5e71-514d-a166-77a3494af806","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bclud.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bclud.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e48cff-fc66-5741-979e-c80bcc7a1ffe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcluub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcluub.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbc0c4-ea8b-56aa-a19a-9414c94b49c3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcluub.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcluub.mobi']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--253030a6-6284-5daf-b47b-7cf0a2aad9fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcomb.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcomb.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f69b7a-cebf-5821-977f-1efb3717bc12","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bcon-asset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bcon-asset.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ffb1038-2b8b-5f71-91df-6a6b41ce96b1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bd-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bd-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4a36cb-cbc7-5a9d-be5c-57bbb3ca5b4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bd95d0f8cfbc1f512a5bc768c17824af.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bd95d0f8cfbc1f512a5bc768c17824af.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--badfce21-5e24-50e7-8541-99820b4a1d01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagchain-network.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagchain-network.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32f7c0e-58c3-54f2-9d41-2ea1dce01f31","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagchain.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagchain.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e7cf0a-6efc-5515-8799-eb40a60a394d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagclaims.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagclaims.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab39026-111c-5f93-978b-d16d486e5905","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagdashboard-presale.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagdashboard-presale.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ce460b-1a7e-5338-8a20-813e008b59fa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagdashboard-presales.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagdashboard-presales.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5faaa27-698a-59af-a44c-5212ee9a41b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagdashboard.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagdashboard.network']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78386144-0eeb-5fc8-948b-e5f392f84ac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagmainnetz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagmainnetz.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a95c9212-7aca-5964-b496-95014391ca6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagnetworks.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagnetworks.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ed8044-b265-501e-8acb-4455ea9f8c62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagtokenclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagtokenclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d4d713-6207-53c7-9a61-a1535cbb0dd1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdagupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdagupdate.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9811a33b-6065-5ec5-aee2-9331cc0b0fba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdbet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdbet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea5d952-2068-5562-8f8c-9f976590267b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdccoinsolana.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdccoinsolana.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4552721-cdd4-5f89-af53-53615ccce794","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bddwa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bddwa.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9a2a86-594c-5555-b4eb-d8879808ec19","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdg-game-casino-in.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdg-game-casino-in.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93785750-4189-5696-b5a7-bbec921d5533","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdlsoftware.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdlsoftware.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d4a6b3-cb26-568a-aa11-60d73036bc6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdmbet-nl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdmbet-nl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f1f6a3-f3a0-5ec0-a001-2b495c81580a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdmelbet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdmelbet.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d53429-72cd-500c-bbb7-794004223684","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bdovoltarion-hr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bdovoltarion-hr.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476a26fc-5e7b-564f-a0d3-09e3ef047a26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: be-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'be-ledger.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff6e291-befc-5bec-a4a1-fe3e2afc955b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: be-nvcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'be-nvcasino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93139bf3-d825-5406-a708-79b7f2e5a541","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: be-safepal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'be-safepal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--606d53f6-c2cf-51a0-a6b2-7d8e0ea8de70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: be37359e39a6c5327b3d94606ef22125.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'be37359e39a6c5327b3d94606ef22125.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--357e75ba-c664-5e2d-a60c-a71ff8ffdd87","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beam-airdrop.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beam-airdrop.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--124d1c03-8688-5587-bb45-bea9e073d6a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beam-get.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beam-get.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bc5ae8-4e13-5921-8bf0-8794e5db9314","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beamless-structure-phase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beamless-structure-phase.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cd7be56-6f40-532a-ba92-9a35853c03f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beamse.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beamse.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e331f45-0761-5cb1-92d3-d571d34d6417","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beamtoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beamtoken.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7cced1-7ad3-5e2e-8bda-3559cd695ca0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beanflip.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beanflip.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d269c9f-e0fa-5d6b-b736-1fec15a1abc6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bear-bull.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bear-bull.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--864c54e0-7061-516a-a932-d5329e3791dc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearablesguy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearablesguy.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e58110d-6b84-53fb-a8e1-c95b9033e4e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearbrick888-malaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearbrick888-malaysia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba94da71-80d5-557a-837e-5dc5fe9afabe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearonpole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearonpole.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02071b0-a53a-5ed7-93a8-ed4c2ba86f52","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearonpole.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearonpole.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910cf444-cef3-5bf9-b011-55cb1096f243","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bears-berachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bears-berachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcfcf62-9405-50d3-a913-b9da39986a5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearschain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearschain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f31e268-ed22-5aa3-a808-d8b1dea1c08e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearxrpl.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearxrpl.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c18441-f3ce-56c9-8e47-c8758ee9cb88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bearxrpl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bearxrpl.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab23d1be-9c19-5fdf-be0c-77157d018096","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beaslt-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beaslt-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbf0ee3-b256-5acc-999b-a595073921f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beaslt-allocationed.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beaslt-allocationed.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca20a72a-1d08-5291-80b7-feebf6aaf448","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beaslt-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beaslt-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a43a03-8701-5b81-bf01-ba6c0b4974f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beaslt-allocationz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beaslt-allocationz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a795970b-2e29-5837-a862-2ba9f2bbc1c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3475f6-dbe5-5b6b-854d-22bbacf46a2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocation.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocation.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f55f02e-7fb0-58ea-a781-0eb2ccadd31e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22cab91d-231b-515c-9dde-b600ce63505a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocations.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocations.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54674515-9bc1-5029-b325-a183938b0351","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocations.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf08893-b2bb-5994-ab74-431292378a68","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-allocationz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-allocationz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6094add9-26f5-56b1-8ced-7e798dcaee08","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4d9233-9bb1-5d26-86f1-ed7f9e87968c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-presales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-presales.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19918f1d-26d6-5bea-8c96-90d88204cd26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beast-solana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast-solana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b10a01de-5092-569d-94c0-54e66d00d47e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastclaimfun.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastclaimfun.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbbc02b-6c85-5d80-9c16-6915d3ec6837","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasted-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasted-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c33dac87-2fb7-51a6-9b6b-775199a21139","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasted-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasted-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f91894-eb59-5193-9296-163207ddda91","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasted-allocationz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasted-allocationz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa86699-c6ae-5d40-a1c6-f88892e5ef1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastgames.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastgames.guru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c09428c-a3ab-5d3f-ae73-d5f0c59a7485","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastjackpot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastjackpot.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55707e29-ccf4-5e57-a7f7-113777c1a8af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastl-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastl-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f9c52d-a8e0-5f7e-8f9a-d8484ae0355c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastr-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastr-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4cd5673-8254-59dc-a03b-49ef2283a9cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastr-allocationz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastr-allocationz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8f3de9-cf99-5193-a0e1-ef08fda9a779","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasts-allocation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasts-allocation.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--632ef3c9-3e68-506f-b218-d3689644c38d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasts-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasts-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb008e8-a71a-5711-9b43-f9925a33838b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasts-presale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasts-presale.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb7ba62-e630-5883-b4bd-163c259d79c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beastsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43737c83-da6f-51b3-aaf5-ce8fdb8164bb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beasz-allocations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasz-allocations.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c88ed02-76a0-5394-a4e2-24fc464a7a4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bebetterop.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bebetterop.biz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29581741-c742-514f-b9cc-738764b5c437","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: becker-solana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'becker-solana.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b070d64f-5fe4-5998-959a-56c4dcedfe7e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beckerscoin.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beckerscoin.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f23460a-559a-5090-a834-cce40088e5ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beckrpresale.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beckrpresale.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89d2752-d8aa-5726-b27d-1fb62b793179","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beclub.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beclub.lol']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b38456c3-2d35-5ce7-a676-d7e47242efd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: becu-paymentcharge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'becu-paymentcharge.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--968984e9-feda-5ba3-b148-4a85995e0389","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bedpagevip.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bedpagevip.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a57533-bc50-5b44-94c0-3c184eecbcd0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bedstockfest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bedstockfest.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74ae56d-08a7-5296-ba73-ed50f549afa4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beecatonsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beecatonsolana.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d831bc-6af6-5fbe-8a6e-124758c48020","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beefm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beefm.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be837188-ec24-5b8a-ad43-7d1e8aa8940e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beefy-earns-finance-yield-optimizer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beefy-earns-finance-yield-optimizer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea432df-41a3-5725-a799-40ff8a798c6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beemapsmigrate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beemapsmigrate.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c29a84-1de8-514e-b67d-d65158af7d2c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beentrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beentrade.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4926a06-c9eb-54a1-b106-3b513e95e97d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beep-beep-casino.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beep-beep-casino.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c2b49c-0540-5ae4-9b33-4c93d0d62601","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beepcasinoplaypl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beepcasinoplaypl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b8ec65e-02c3-5e1a-bd2f-1ae5dd746c07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beetplayplaygiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beetplayplaygiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d51475f-37da-52b0-a67d-eab2617f8130","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: befi-labs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'befi-labs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb16157-338b-5f19-863b-41d4ebd2efe4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: befilabs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'befilabs.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6688d0c4-bdf0-5ed8-a1f7-56afc42a53cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: begin-flarefnd.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'begin-flarefnd.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb88b06-1198-5abb-960e-2b1e1f363eac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: behdp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'behdp.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a975730a-23f4-5ae5-a92a-e7272b93604b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: behtarin-strategy-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'behtarin-strategy-bet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15ac70f-cde0-5e56-9166-6859d2040c5f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: behtarin-strategy-roulette.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'behtarin-strategy-roulette.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8e7a84-d0d9-57f7-92b8-f1999438b886","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beingoogle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beingoogle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09538494-9a95-5612-9a9e-36a8da8fd22e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beinveron-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beinveron-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca843607-33b4-51ed-9b32-79058326e0e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beinveronapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beinveronapp.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb184fa8-db3b-597e-88a0-a7154dfbb5de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bel-fius.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bel-fius.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d826bc1f-5954-5ea7-9a68-875899cf863c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belasting-betalen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belasting-betalen.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d80369-7726-5762-b601-b1a9b911625c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belcoregpt-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belcoregpt-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21bde304-890e-52a0-9231-45607b39972c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beldex-io.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beldex-io.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0be331a-85da-55ab-b8a8-74a09816bb88","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beldexcoindesktopinstaller.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beldexcoindesktopinstaller.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c34810d-895a-5f36-98c3-716dd2da0ffd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belgium-capital.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belgium-capital.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c8d1e1-a761-556b-92eb-a88c75a24230","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beliefprintr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beliefprintr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f6fdf7-ce3f-516d-a7ee-dffe9d39ca07","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beligas.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beligas.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1511c47f-b5f6-5e04-91be-3a41ff141e25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bella-casinos-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bella-casinos-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be8fab9-eab2-5177-9785-c1b7798806ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bellahk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bellahk.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8ebda2-5bf7-5a55-adc9-b057690d49bd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bellamacho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bellamacho.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c53b79-bb73-5c5f-b2cb-4339d4ba4eb2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bellinghammedical.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bellinghammedical.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e013a7e-47b3-59ec-9995-0390509a87aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belliscasino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belliscasino.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e8a8b81-709b-5b04-810f-80637b06af8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belloandblueevents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belloandblueevents.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48564a5-9a73-5120-9dc1-4626f0d510ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bellugabahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bellugabahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b96ac59-b096-5167-9f57-768c94688970","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belmont-btc365.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belmont-btc365.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f93e2300-a460-5a16-b765-a47a1af32608","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belmume.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belmume.cfd']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70396efd-c15a-5b54-ad9f-30c62cb8886d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belnano1843.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belnano1843.direct']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d0ca22-3b44-5ec3-80b0-60cb857789be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belsteroid.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belsteroid.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5de1ebd8-8541-50e1-b25e-27d9f53be846","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belstocklimited.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belstocklimited.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db14c4df-2467-5d86-b98a-20591c6938c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belt-v1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belt-v1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e158f6-3fb7-5ab9-9730-c5d3148554ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugaabahis.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugaabahis.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a034a342-8aac-5520-8217-ea813615dc8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahis-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahis-giris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22fbc05-f3e1-5f97-8470-eecb1a855be3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahis-yenigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahis-yenigiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9ac46f-5712-54c6-9b7a-5822be1768d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahis2026giris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahis2026giris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d31d0b-8293-5d4e-9dc1-82c01b60450e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahisadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahisadresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d244b9d-335b-5403-8376-f89f4ff6505c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahisgercek.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahisgercek.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4425fd27-8596-5a1a-b4c1-1bb64e1054cd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahisgncl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahisgncl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edb8c2be-f645-5263-b633-5225d8dc87f6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belugabahiss1064.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belugabahiss1064.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b970b3b-da61-5f45-abad-02e6d821b3e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belvaris-gpt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belvaris-gpt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bfd9da7-fe0b-51d0-abbc-e04fe2d836e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belvotron.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belvotron.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ee3b71-4d8e-56d4-b379-6221d3eb3504","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: belyeapowerco.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belyeapowerco.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--476322d8-e667-58b1-a1f3-49399f8bf97f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bemvindoclienteprincipal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bemvindoclienteprincipal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e883d89-c0cc-5707-92a8-49faefb1c8e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benabolt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benabolt.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7165f859-6808-50d1-a606-755faae5d5e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benchmark-shopify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benchmark-shopify.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe73a7a-476e-5dcf-a000-6efb83a33d9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bender-search.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bender-search.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e59adfb-f98b-5725-8b43-a5e82534e2c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bendigobank-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bendigobank-help.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a120f3-b6be-56b4-b0fd-da208cf12396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bendigohelpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bendigohelpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--925cc36e-73d1-5719-84be-7e8fefeb9090","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bendigohenking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bendigohenking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12b666dc-a62b-598a-a408-04791a106eea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bendigoservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bendigoservices.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bd7514-169e-5b89-946b-357cc6445d62","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beneficialstateassist.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beneficialstateassist.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de9c7070-e875-535f-a3b8-641416b07f0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefit1ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefit1ca.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52566ae-025e-55f6-975f-c4ebd65bc323","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefithold-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefithold-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--841bd899-b442-5eb4-9605-0c62544c9fef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitline-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitline-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd926436-bb0b-552d-96cf-0d4b2890d8de","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitportal-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitportal-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5bbd0b-b151-5761-b500-d49b62ac2c92","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitreview-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitreview-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80cf39f-33d9-5fad-a6ef-ab8f30511c1e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefits-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefits-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3621ed7b-aafd-5d12-bfbd-45a1bc53e941","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefits-solflare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefits-solflare.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6f0eca-994a-5338-b556-dd6bb87172c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitsfazaacard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitsfazaacard.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e93d3961-c2ef-5dc3-a459-85a28d9e9a97","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitsfreefazaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitsfreefazaa.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50529a5e-88aa-5bf0-81d0-990564420bb5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitshubaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitshubaccess.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a1683a-ba92-5598-b87b-06696d28e06d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitsreporting-mygov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitsreporting-mygov.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b17f18-d880-5f0c-a840-7ad8c8e5bafb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benefitswebportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitswebportal.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9044058-8f58-5234-8255-ddd1c6e69074","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benestimazza-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benestimazza-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfb9a0db-62cc-50f5-9f8c-8a80032f442e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benimbahis-resmii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benimbahis-resmii.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d1247f-e866-5eda-8a48-975321779cc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benimbahisgiris26.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benimbahisgiris26.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13737fc2-502e-5385-8fb2-f7ffdf6c4bc9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benimbahisresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benimbahisresmi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e2d7e26-ef4b-5cd1-b021-1aa6f326d6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bennexcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bennexcapital.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeb8a718-8530-5455-81ff-151baff8bf80","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benqiclaim.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benqiclaim.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7da0f41-4aa5-5cd3-996b-30042425f237","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benqiclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benqiclaim.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87462e-7bcc-5075-90e7-fcdefa06cb9b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: benviso.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benviso.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28012d1-5f09-5da0-8e89-7e359e099413","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beonbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beonbit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54eb7045-2831-53b5-b3dc-237370c8ca55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beorax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beorax.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f110b359-39eb-5a56-ad45-4ea4fde0e73e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beovax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beovax.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b80f5a2-f578-526a-a86b-b51c26a21ea7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bepadex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bepadex.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db8c1dc-6a0d-5b0d-9109-18dd0b4d38fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-evm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-evm.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da65881-fcd0-5c3f-bb51-9e0c8b79b95a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-evm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-evm.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4163ff50-62fb-53d4-982b-4a7658c51db0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-rewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-rewards.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85fd9988-5387-548f-860e-b1f9d3db3ada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-rewards.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-rewards.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b044fe8-2178-50bf-b6d5-db53f684ed32","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-rewards.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-rewards.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb0cdbd-e448-5ff9-81ab-5f672a715fe0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-rewards.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-rewards.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--569129ca-4752-5004-95cf-57f4cbcb7f8c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachain-tge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachain-tge.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ff1157-e99b-5a47-b358-db67e4d3804f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachainclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachainclaim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a643d89f-3a9c-5074-9ee8-d890a1e517e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachainclaim.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachainclaim.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc1b7318-08d5-52ae-b364-9dc746c15577","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachainlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachainlive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57867756-4bf3-5ae0-b8a0-6d71713e4077","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachainn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachainn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b64bbfe-e348-5759-93f6-27f2a9db371c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachains.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachains.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfc1e796-b23f-523b-ab9f-3623a0da9914","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachaintoken.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachaintoken.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aece4e6-69c3-51a7-a7c4-c7d5eab8532e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berachaln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berachaln.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebfca76-da2f-53b5-abe9-f6d31358d719","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beradromeclaims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beradromeclaims.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfbaf38d-0eaf-5000-bd20-2051d8555ac8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beramas-berachain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beramas-berachain.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99704ccf-9642-5d93-8100-e9901f53911c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beramas-berachains.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beramas-berachains.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a37a773-b34c-505c-bea3-17f602a55ef5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berandshin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berandshin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d81940-2ac4-55a9-8b78-f23673b83cd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berelaycolis-tracking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berelaycolis-tracking.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52fe589-a84c-58f2-8187-1dae2f9302d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bericht-mailing.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bericht-mailing.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba42f0f5-a4cd-56e8-bc98-dd7f15525692","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berlinbetgirislerirn.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berlinbetgirislerirn.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0093a9aa-9003-5ee6-87b4-c1bfb1951540","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bermeo.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bermeo.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c8ee645-5e1d-5653-8aa5-d43fe999c578","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bermudaskindoc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bermudaskindoc.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3391edd7-9507-585e-9382-1f4ebf3fab30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bern-hub-platform-ch.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bern-hub-platform-ch.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e14a9fae-5fea-51ca-a2f0-132d3c462c3d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bernixqelvorn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bernixqelvorn.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b135bbe7-433a-5051-bc2a-2952c9499304","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: berriestcg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berriestcg.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d9c4515-19d9-555a-a768-1d59b52744a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bert-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bert-allocation.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eba6564-3662-54e7-8044-24f8c2ff4487","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: besser-heizen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besser-heizen.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf85053-11b9-5441-951f-90d04937e21a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-crypto-invest.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-crypto-invest.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cab5fec-678c-5365-b7c9-35586409fe01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-ethereum-mixer.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-ethereum-mixer.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc5504f-6c9f-56f0-a6e9-5ec13934c81c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-game.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-game.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ab4c78-5c76-53ae-bd1f-10dcb622bc7a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-new-zealand-online-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-new-zealand-online-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e41cdfa-ac01-5565-8ed8-cd7807e90038","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-newzealand-online-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-newzealand-online-casinos.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e4722d-eda9-5497-8c19-19666b25a0fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-newzealand-online-casinos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-newzealand-online-casinos.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4abcde4-e879-5bbc-bac5-2050499f0a8d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-nexus.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-nexus.digital']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40cf8f45-f07c-54e5-bad0-581d2affd5f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-nexus.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-nexus.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad0bdb8-a45e-5857-a0b2-3807ad542895","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-online-canadian-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-online-canadian-casino.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cde4ab2-bd22-5491-9687-7fd592c21c60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-payidcasino-au.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-payidcasino-au.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dfd1818-11e3-5b31-b7a5-036f92b0916c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best-spravkys.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best-spravkys.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa55021-fc7c-5580-800e-ff9cb36bcacc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: best4you.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'best4you.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c722951f-61c3-5b01-a1c9-23d09a0c7e01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestadsagency.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestadsagency.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bb7588-f14e-5c87-ae5e-50859106950f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestairdrop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestairdrop.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f33cc57-8857-5ec3-8bea-dc249f96a0b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestairdropsnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestairdropsnow.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb63208-3238-5bab-843b-e15ca54cf6ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestb2kresearch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestb2kresearch.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f244c907-885c-5e91-9109-5efeb5023cc2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbetspredictions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbetspredictions.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6693aa96-6fb5-584a-8383-d8eb849d568e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbettingsitesiniran.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbettingsitesiniran.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec33824-79f5-50a3-ad20-fd5b8f3d7d2b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbitcointumbler.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbitcointumbler.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2578d36c-da38-536d-99a5-a43179163a26","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbitcointumblers.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbitcointumblers.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97605f40-b870-52fb-b4cd-2d678d1e1759","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbtcmixers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbtcmixers.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9bfe489-73cb-51fb-989b-1c32752c3977","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbuymeds.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbuymeds.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae3cd4d-770a-5d41-9532-652435935fe0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbuyofficials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbuyofficials.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8048c5-a21d-5a32-83e0-7f47e9800032","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestbuyrew.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestbuyrew.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad82bd0-0f6e-5335-927e-4e3991504fbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestcashback.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestcashback.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c008e94-085e-5a4f-a938-78c0952d5d20","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestclaim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestclaim.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b4cefd-4805-5e1a-bd84-87d35afc0428","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestcoinjoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestcoinjoin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c34fbbc-8f2f-5b8e-8c4c-d5a0ae606ae7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-casino-ohne-lugas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-casino-ohne-lugas.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--355e832c-7afa-5ff3-82f7-4d045ae2517b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-casino-revolut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-casino-revolut.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--705c2d68-a1ce-572b-89d4-82755dc466f9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-casinos-ohne-limit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-casinos-ohne-limit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c144f9e2-74d0-5039-869c-51351aa9c471","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-casinos-ohne-lugas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-casinos-ohne-lugas.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7719661-bd4b-5cfa-8578-6043e5535576","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-norske-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-norske-casino.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77ae186-25ad-5d29-a63f-75ae5b2b77e9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casino-ohne-verifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casino-ohne-verifizierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f028264b-e207-5bd8-878a-4f8512682144","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casino.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casino.win']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85effe94-f414-5010-a972-64e9ee947260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casino1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a1b59d0-bf6b-529e-8503-ef2a73eaac03","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casinos-ohne-limit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casinos-ohne-limit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee8145f-ec25-54a3-8d44-0f13270c75d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casinos-ohne-lugas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casinos-ohne-lugas.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df1fc3b-6bf9-5c53-8a66-5e414d9d01bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-online-casinos-ohne-verifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-online-casinos-ohne-verifizierung.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89004d86-963e-5afc-984d-f5494fcc32c7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beste-spiele.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beste-spiele.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d750c220-6393-5a5a-ade2-4502dcd514e3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestfintop.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestfintop.site']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8071dac-1f5d-5ab3-8ca5-b6eb750e403c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestgenericonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestgenericonline.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93c0b30-ef45-5490-a1dd-a730b34e580e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: besthealthcareinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besthealthcareinfo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7321bf1a-9bda-51d1-9952-2ac2f043053e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestlittlecigars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestlittlecigars.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c787193a-66b7-5ace-a712-9eea943a6141","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestmove783.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestmove783.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8d15aa-16a1-5789-bbd7-607ad6b0d372","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestmove896.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestmove896.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9080e712-099b-5f12-894d-c57b5671b19e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestoneoffour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestoneoffour.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b393705-bf50-556d-824c-9f74fcea2163","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestonlinecasinozondercruks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestonlinecasinozondercruks.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--060fb4f2-ff0a-55e1-b6bb-ee484f0e2672","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestonlinecasinozondercruks.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestonlinecasinozondercruks.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b97cf7b0-b362-5813-a97d-a065205d01c1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpayid-casinos-au.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpayid-casinos-au.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb9794c2-383b-51ed-807c-88ad0d974767","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpharmacysearch.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpharmacysearch.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db28c4b-6b5b-5a77-a99e-03f6ce1508f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpillservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpillservice.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26413d7b-1f63-5e15-853e-4fcfdf2821f4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpillsnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpillsnetwork.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f1fe8bb-3e88-50e3-996d-1e5affef9f90","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpillsoffers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpillsoffers.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d357c63a-3079-5b7e-9f89-766d13a79cd8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpricedrugs24.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpricedrugs24.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f788a5c-c7e3-5d78-bb33-9f50cb96069d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpriceremedies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpriceremedies.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07107a47-e306-590e-83cd-a0ef6789ea41","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestpricetreatments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestpricetreatments.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ae1476-ad26-5221-8142-2fb86f302639","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestreliableremedies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestreliableremedies.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d959a082-bcd4-5fe2-afd4-0b641d29e3c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestsign-postbank.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestsign-postbank.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece8008-f978-5d88-bdd7-23d7a3308e23","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestswalletokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestswalletokens.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7746268-8e8d-5c5b-acc2-24ee449b5562","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: besttokenlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besttokenlive.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68608d54-1c64-5167-b230-b0f15a4fcf8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestuyanwkqqpkasnwqfk.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestuyanwkqqpkasnwqfk.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a22ef868-9547-5224-bac0-6e744d357511","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestvaping.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestvaping.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c2cb3fa-f697-5db7-a272-3d5e0b625725","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwallet-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwallet-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9bafaf-3e2f-5f0b-a11a-082003e7f353","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwallet.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwallet.finance']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--931156be-93a5-5df7-a17a-5847516f3777","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwalletoken.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwalletoken.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b45273-78f6-5015-8fa8-5ceb2d130b0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwalletsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwalletsecure.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34708c23-31e9-5b0c-821f-29e4873d4a74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwallettoken-claim.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwallettoken-claim.info']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2161f8c0-a9cb-576d-b9a8-c4349b28e4c4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwallettoken.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwallettoken.claims']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce0c78af-3e62-518e-98b9-4820b5fc56e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestwalletxtension.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestwalletxtension.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26f9c7a-619c-5d8d-87ba-adff57e8938d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bestxesxesxes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestxesxesxes.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af45ebd-238f-5549-ae6a-6754234958b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe490e09-93d0-548e-a64b-944b4e514cad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-adresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-adresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343a3c87-70cc-5a6e-a78f-2b738a8a602a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-alpha.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-alpha.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2132841-c90a-5b0d-bde2-32c9f96ed47d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-casino-bez-wymagan.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-casino-bez-wymagan.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010a5274-7206-5c86-9b9c-253cf40cded8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-casino-casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-casino-casibom.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c46ac83b-dbd0-561b-8095-c476b2ce4e06","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-casino-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-casino-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a9d514-8606-5724-b680-e58c03e00c77","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-codes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-codes.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8026c8-1866-5c64-b0bd-7c4409717569","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-gercekgiristelegram.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gercekgiristelegram.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da75db5-b3ec-5a91-9635-184d9d44a278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-guncel-adresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-guncel-adresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e22db35c-50a2-5961-8658-1db3d41f7da8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-gunceli1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gunceli1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--483b4878-d164-5a76-bab6-e85a2cc4ec1f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-kasyno.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-kasyno.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90292153-7e26-519b-a66c-b7e31fa4f594","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-kazan.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-kazan.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d551a775-b7fd-5e37-8ce9-28d06c4cf50a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-nacional.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-nacional.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efba4b59-24b3-5de0-b83c-0be0652f0273","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-nano.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-nano.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c7108c2-bf03-5de5-a97b-387c34a703cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-on-games.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-on-games.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0ea53f-f67a-531e-9c5b-67634ec408ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-pas.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-pas.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71561663-5e1d-56da-aeeb-2ea21543cd0c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-qirisi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-qirisi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638aeafd-41af-53f0-826d-2eb7f7e68660","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-salvadorcogiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-salvadorcogiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2cf7c1-469b-5f64-8f66-79e52fdef7c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-up-casino-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-up-casino-india.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87506e20-fb68-5514-90c9-ddf2db4e0f5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet-x.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-x.cc']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56d6ec19-8e45-5057-abac-dcbd349f1d66","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet0ffice.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet0ffice.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61faacc1-22a1-53b1-8168-2d7bcdd57fcf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet100philippines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet100philippines.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b813a0aa-f6c8-580f-8a94-e400dcaeead6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet10bet-hemensiteyegit.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet10bet-hemensiteyegit.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b503e3-036e-5852-a6ca-6fd470ace65f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet10brazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet10brazil.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f8887e-eec6-562a-a1dd-1a7e8c0a6613","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet1cio-gercek.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet1cio-gercek.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf5e1c4-0549-5f9b-9702-6372ebf3b7a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet1cio-mobil.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet1cio-mobil.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975b0fe8-fa03-5da7-8bf2-a8ae31b8b3ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet1git-girisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet1git-girisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b028cf9-54f7-5966-8ba3-3ad06a985acd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet1play-dogru.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet1play-dogru.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc41e503-b606-547c-b7c3-5e327350c1e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet30casinoonline-argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet30casinoonline-argentina.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f02ada2-d54a-5adc-947f-c75c7bc8de3f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet30winar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet30winar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bd0062b-ddbc-54c4-a992-60e444b4e01a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365-argentina1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365-argentina1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db250658-df39-5a8d-a6d2-d1050e855b5e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365-au.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365-au.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6794a678-79fe-5440-a03f-90372c1f172c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365-casinos-nz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365-casinos-nz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edeca74a-7890-54b5-bec0-271ac58184cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365-mexico1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365-mexico1.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2970e4c5-a485-5df3-a4cf-7846e87a6c55","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365chile.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365chile.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ecabac6-8eb8-59c6-84de-da43caffb55a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365gamekz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365gamekz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e70b47-7c41-5e95-aab6-b08c6d050091","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365india.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365india.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e03ddc-4fd7-5634-97c3-480e47788953","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet365southkorea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet365southkorea.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8827647-e218-5fb1-9427-c5e406a23d83","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet38cas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet38cas.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b6fc42-644f-5ad5-9b7f-1af468630d1b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet38korea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet38korea.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42552e0f-4781-54ce-b85e-2cb4d1d45ea7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet4cuci-malaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet4cuci-malaysia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd637f2-fbaa-5855-a2b1-0caef1ea10ac","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: bet7winde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet7winde.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c399b66c-7c55-5492-a371-1ae79348e92d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beta-flarefnd.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beta-flarefnd.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd2f267-ed3f-57da-bfa2-26524855b6df","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beta-monad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beta-monad.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b888418c-37f5-570d-885f-7e767204966e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beta-moonshot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beta-moonshot.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb037ac-190e-5692-9587-fa118177a3b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beta-polyclaude.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beta-polyclaude.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ecb19a-af5e-5780-8830-3a6f95269ba5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betadonisturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betadonisturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce373f57-8c2e-5643-b831-3f061adfaa6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betalab.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betalab.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--051a7ca5-0b32-524e-866b-e650fd0c5c9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betalice-deu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betalice-deu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4656fde0-3407-5149-bb0d-9ec376be4988","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betalice-eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betalice-eu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c8d6aaf-9838-59bc-8a94-a30de1e1344e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betamiral-hemengirs.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betamiral-hemengirs.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40f6bbcf-9780-5a84-89d6-9e99ab113f4d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betamiral541.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betamiral541.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdacd107-4442-5187-be06-a2386a16d5d7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betamiral550.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betamiral550.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfd3be41-125b-5b2a-8ada-333acf61fac2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betamiralgirisii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betamiralgirisii.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ad9993-47bf-5929-a8f6-968c056da85f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betandwinnergiris.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betandwinnergiris.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e47b30-8e8b-510d-ad82-3a84c1aeecd5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betano-bestslots.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betano-bestslots.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db8c981-d2b6-518d-92eb-e8eccf154d7b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betano-giris-2026.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betano-giris-2026.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--676a799f-50d7-5d76-8452-dc2cfbd4471b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betano-guncel-2026.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betano-guncel-2026.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad9e86dd-7e80-54c3-82b6-d776869b9fe9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betano-peru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betano-peru.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9954be8b-e661-5371-a8fc-7b4580ed99ab","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betano-slots.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betano-slots.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14653073-bc0b-5446-b0b5-359961e5e3d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betanoapp-peru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betanoapp-peru.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdbc731d-a10b-5244-9ec3-da5b212760fc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betanotrgiris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betanotrgiris.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd1bfbb-6e71-5230-98ca-adf1bcc1db30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betarape.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betarape.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c8ebd4-5892-53df-9145-a10b8a24ef8a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betarheyy.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betarheyy.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0391472f-6cb6-5264-8f2d-8e058b01b373","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasta.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf012c3e-9639-5273-848f-f72c613973fe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-2026mobilgirsadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-2026mobilgirsadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea1448a-803f-59e6-aeee-9ce2c117fdbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-adreesimyepyeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-adreesimyepyeni.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f08d876c-5a31-583a-b2c8-ab737777cfb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-adres.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-adres.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69458ba7-e527-5566-ae4d-8f8d9fae7c05","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-amp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-amp.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b71c0d2-69e3-519e-b9ff-b10b933a61da","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-bonus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-bonus.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be7d3c6d-cca7-579f-98f7-3ff1755dbd4e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-destek.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-destek.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7a20aa-80b1-500f-907f-359c2b623113","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-erisim2025.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-erisim2025.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ea4da5-959e-5e34-8c1f-85621213a8d2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-fast.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-fast.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c07527-32dc-574d-ad33-e395a9840296","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-gercekgirs1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-gercekgirs1.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f971b8f-637d-50e5-842d-4fad27483cbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-gercekgirslinki.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-gercekgirslinki.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--543c1ba9-8c04-526a-a59c-51b5334f355a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-giris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-giris.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09cf1622-9903-5484-85e1-6340fe68e00e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-girisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-girisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7789e1-c5f7-524a-8f13-78f0440ac805","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-girisaktif.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-girisaktif.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be0ada2-0798-5b85-809f-d5c6aac3ac2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-girissadresim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-girissadresim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5390935-eed9-5999-84e2-205795ef54c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-girisvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-girisvip.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56708fa5-285a-59bf-a4c4-dab07d825480","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-girssadresimm.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-girssadresimm.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc569ff-1a94-5874-bdef-1c8e09e9b652","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-ksl.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-ksl.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08daae7-477e-51ca-9022-1f26c0bfa730","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-mobil.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-mobil.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8bc9a9-95b3-5eb1-803e-d0545df9fa43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-mrl.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-mrl.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97130fc-81ff-591b-8cea-4c769aa6f407","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-net7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-net7.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0051a506-8e26-53f3-9909-580f96a0eb81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-nl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-nl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52142106-d6f8-5b3f-9eed-d3b4ca92363f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-offical.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-offical.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5fa2b9-cb5a-5dad-86cb-ccda39b2e795","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmi-adres.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmi-adres.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a85a615-2d01-546e-ade5-72d5af0d5194","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmi-giris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmi-giris.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--274a65b4-e31c-5e01-bcd9-675ad8cdb851","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmiadres.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmiadres.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb16aa03-cabf-589e-a7fc-f5914bc2f59f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmiguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmiguncel.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e5a897-2d3b-50fb-99c3-ed9b8e68f194","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmii.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmii.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ed2b53-b213-5423-aefb-021b2c9242ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmipazar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmipazar.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e9b07e-2400-54a0-a313-49e6c22ef08d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-resmitek.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-resmitek.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b1c81ef-7ddf-536c-bb55-f7a12e6ca4ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-telegramlink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-telegramlink.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bc9676-a3f1-5a4a-8018-a4275f1cb26d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-tikla2025.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-tikla2025.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ded0cf2b-cee1-5907-8444-d45250613aea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-tikla2026.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-tikla2026.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b952260b-2379-5c1e-b04d-c9b05976d906","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-vip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-vip.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7afda636-cc49-501e-98e6-22c1188e6a43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-vip2.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-vip2.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44564770-3807-5d0f-a890-764651ae15f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus-vsl.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus-vsl.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ca6553-e21e-5cdf-b4d0-8be06acc7888","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus1416.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus1416.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--deb5e061-3d0b-5632-8540-75f4562550a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus1866.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus1866.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4991ad21-037b-57c2-9dbe-f3f07e85d94d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af79703-8176-512a-82dc-5c763d49780e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasus2112.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasus2112.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e863f572-9cc7-565d-a16e-8473ee89ecc3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusa-telegramlink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusa-telegramlink.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--722c7ec6-e6f3-55ba-bd23-c5d1e699f978","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgiris-resmiadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgiris-resmiadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48a8122-8fc7-5365-be9e-4de3b5f43a95","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgirisadresi-2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgirisadresi-2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f03d53-035f-51d0-9a26-e8c365e7bd99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgirisadresimiz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgirisadresimiz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62adc0aa-eb41-5e29-a1dc-d19058935132","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgirisadresiresmi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgirisadresiresmi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ae6d99-0e3b-5654-be5e-9b448052e9ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgirisim2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgirisim2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ff1991-9475-5272-8ff3-97bdb9692ac2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgunceladresim2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgunceladresim2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17898842-9a10-5b7e-9b08-c045af5b5505","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusgunceladresimiz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusgunceladresimiz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85d5f57-7237-538f-b7e6-bad8f4d79237","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusguncelgiris-adresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusguncelgiris-adresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a513a513-7e91-56e3-b1dd-e52552e0bc84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasuss1124.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasuss1124.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c824f04-f1de-5978-b1a9-ed11df516368","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusyeniadresgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusyeniadresgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3631a74d-007e-5579-85b2-8de3fcd6996d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betasusyenigirisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betasusyenigirisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa15fdf-b3f4-5453-a542-3e755dd7e47d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betaxar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betaxar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72bc3ab-0bfe-5857-9a3f-a037831a9cc0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbarteruk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbarteruk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9f82a41-11bf-5f84-a4a5-c5ebf60d70a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbey-bahisfirsati2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbey-bahisfirsati2026.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--988f54de-6403-5e85-a1f5-1c45b98e57d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbey-kayitgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbey-kayitgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d18e67-c0f0-5ad4-9e0e-c5087c64cafe","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbey-sefiirkazanclar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbey-sefiirkazanclar.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81ac5b75-a7a9-58c9-83a9-5fa1cc3ef546","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbigo-firsatli-siteler.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbigo-firsatli-siteler.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbfceac-596a-5a55-8f29-d0ff2c30b9a7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbigo-net7.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbigo-net7.sbs']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60768e10-e546-5949-ba7a-36d044c56228","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbon222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbon222.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29250fef-4488-5c4a-80ef-6cc586536388","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbonus.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbonus.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb5e5b4-3dda-55cc-be16-bd4dbde0e7ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betboox2450.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betboox2450.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6ae421-5f4c-55d4-aba6-00272a5defeb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbox-tr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbox-tr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e887e1-631f-574d-8cda-79c1b96ab70e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbox.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbox.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a598109-d4ff-5761-962f-820265486017","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betbox3398.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betbox3398.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b1713e-073a-5e77-9289-896e8e7d33bc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betboxgirisi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betboxgirisi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9624ab-ceea-5132-a63b-09f395c5a45b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betboxwinar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betboxwinar.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db97b3f5-6164-5158-a28f-962e79bf8594","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betc1o-hizli2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betc1o-hizli2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd717c0-8c34-5f15-a537-aea776a54dff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betc1o-saglam2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betc1o-saglam2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8013696-867a-57f7-adb2-8ca66bf98fd6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcashwinau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcashwinau.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01575d4d-158c-5e79-9a84-de28acd23ae4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcaveit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcaveit.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5b4f6f-5dad-51a7-8211-85f6eb7d3c37","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betci-girsyeni.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betci-girsyeni.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94827503-4017-56c3-be88-46ae301061b8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciiogirissadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciiogirissadresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65572353-4d0f-5c01-9732-e46b1cf66bbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-2026-gunceladres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-2026-gunceladres.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69b5bfc4-e4c0-5899-b07e-d715eb499e16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-2026-guncelegirisadresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-2026-guncelegirisadresi.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62379f71-73e6-5257-b99d-cfd3764d7259","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-adresim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-adresim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--033414db-d073-513f-a794-a8234ab45fdf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-adresimiztek.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-adresimiztek.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14620f02-60a5-55d2-ab52-705a8f7571bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-applogin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-applogin.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc0920b-8207-57d4-9c59-7dff19a5b2a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-erisiim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-erisiim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a19a1ad-24f8-5c99-8093-aa847da5a21d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-gercekgirsadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-gercekgirsadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb1cd97-7598-5b49-997a-7dc402a120b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-girisleraktifs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-girisleraktifs.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0912532c-9b23-5adb-ba82-0dcbb2fbc50a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-girsadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-girsadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b120052e-3199-5baf-be82-7d03ceac7223","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-guncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-guncel.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2820701-66f4-5070-8faa-fa821280a2f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-guncelltek.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-guncelltek.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de003e0-1b2a-50ab-9405-d1c47f15462d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-kurumsal2026.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-kurumsal2026.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75bb3a7e-b55d-56b4-aab9-ebec57570285","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-mbl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-mbl.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc902e6-421b-5d74-b79b-fb80dd0bcbb0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-onlineaadrresler1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-onlineaadrresler1.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3e1b85-ba98-5259-ae29-36992c4b68a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-onlineadrs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-onlineadrs.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b501edd5-f37c-56dc-9998-35e0fcd4690f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-onllinetekk.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-onllinetekk.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b3ab8f-aa51-54c6-9eb8-7c766f88b5cc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-onllinetekk1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-onllinetekk1.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7784c8-0811-51ac-a65c-bc1a38c774ef","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-orjiinal.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-orjiinal.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7cf3cab-a8cf-5b7a-9beb-f65d5d6ef234","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-orjiinall.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-orjiinall.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824cf5b7-ac25-589a-ba55-6caef1fc3597","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-oyunadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-oyunadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--164dfc8b-640a-59a6-98e7-3c916a9e24c0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-resmi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-resmi.org']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91baf898-eb7e-5b99-9fdf-1dc11b9ff726","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-sitegiriis.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-sitegiriis.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2602e6-d9f3-5580-b81a-8bcaf3106a76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-tekqiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-tekqiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8772f6df-759b-5d45-a02d-2b56d4ce7bca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-tr.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-tr.life']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29270d0f-6f9c-5c32-b987-ab81327a852c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio-turkiye.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-turkiye.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea2078c0-0d3b-5db2-949c-8c794fe5ff9c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio.cyou']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--743caa6b-5b63-5e86-a2b3-3bc8d69f98c2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio0726.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio0726.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1aabc4b-dd0d-58c0-a52c-cc26db3415b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio1.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio1.cyou']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d5500f-658f-5da5-9556-8c981e064e6c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio2026guncelgirisin.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio2026guncelgirisin.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aade4954-e193-523f-b48a-3985dd89cbf4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcio95l.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio95l.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1034adb3-8e86-5c10-9eff-33d7d8cc4ea0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciodaysgirs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciodaysgirs.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--358f92d8-cc1e-50ed-8b39-ee07eeb97bbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciogncelgrssa.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciogncelgrssa.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--534f8b89-eac2-53a7-b548-79aa934e6176","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcioguncelgirisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcioguncelgirisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd48c9d-a151-5105-a8cd-1fae9b7d56f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcioonlineadrees.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcioonlineadrees.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bbf8f14-759c-52cd-aa6a-84e324547d27","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcioonlineadress.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcioonlineadress.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1e3dc24-a732-5e74-8219-82e85416ab30","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciooresmi-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciooresmi-giris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7433410-c243-58af-8e62-1bbe9ec907d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciosweb.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciosweb.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f28a5a90-ee32-5e10-89ea-4a8f3a3aa36a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betciox.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betciox.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d61207-631b-5494-bd09-9f0dafeb32b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcioyuz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcioyuz.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad499d50-3efa-56f0-86d6-df9d1c9681e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcirn.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcirn.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad45a17-2377-55e5-bace-5e93098e6517","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcity-casinos.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcity-casinos.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d54ef4-3648-5c74-b6ca-52d166b9a1af","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcity-uk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcity-uk.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdcc82be-c332-5f47-b3a9-6591f6acec3c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betclicturkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betclicturkey.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20fcff0-8f8e-5698-ba86-101ca0236d9d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betclo-girisim.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betclo-girisim.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbe3a28-d849-52b3-9faf-fdfb4084831b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcointu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcointu.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32f430f-e75e-59f9-8708-c965c00eb772","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcollect.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcollect.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afbbe469-257c-5ad9-83cb-3c442e2025fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcris-casino-nicaragua.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcris-casino-nicaragua.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d71840c-239c-5917-b6c9-eb37b8a9d316","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcris-mexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcris-mexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93eb36c7-9da7-59c1-90f7-cfe83678c7f1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcup-adresin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcup-adresin.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c03273-875a-5317-ba72-06a099f22871","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcup-ampmarka.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcup-ampmarka.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f6aa0c-a89d-555c-9dcb-9f6ed439e5d1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcup677.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcup677.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--953e6b04-0661-572c-8dd1-af3b19f99a22","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcup705.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcup705.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c137cb11-0b78-5531-80cd-93707c98931c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupgirisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupgirisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4aa651d-38fb-5060-ab1f-c18b17230acc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupgirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupgirisi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a8b112-f966-560d-ac1e-1ae8bfa47b60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupguncelimiz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupguncelimiz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02947476-f68a-5b35-a5f5-f1ebd532c472","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupguncellinki.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupguncellinki.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54c10af6-c892-5309-8c71-786d08272fe5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupnetgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupnetgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e69040-7812-594a-94a2-0f480dfb49e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupresmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupresmi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5a71a0-d29a-5cc8-8284-04eb10fde0b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betcupsonadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcupsonadres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44516fd3-725c-5321-bd35-2985cc5d4557","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betdl.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betdl.app']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9e35c5-4d01-51c5-8296-4f42a4b84dad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betdogalgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betdogalgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2840a917-717d-51fe-a179-6d1b02f74c99","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betearn.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betearn.bet']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eaaa4f6-765b-5fb5-9bf5-6f9c2bd40278","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-2026mobilgirsadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-2026mobilgirsadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a82b9f6-93b0-51c4-912f-39b86e24f9f8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-app.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--387d9ab6-c991-5846-8776-b7b64a1f98a2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-bbz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-bbz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f394aa0b-3729-5639-984b-f8f229da6d0a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-betadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-betadres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0755cfed-3a9f-5dbb-97bd-622bdde800b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-betadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-betadresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff8d767-f46f-5393-a72d-765730c615ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-br.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-br.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee35aecb-9fff-55ae-8aff-0e36ffcf4263","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-brl.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-brl.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc83ae7-0539-5013-860d-bbfc13adb71c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-direkgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-direkgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41aae3b-a97e-5613-a5fe-4255b4f38717","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-enyeni-adres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-enyeni-adres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27332f1d-fc22-5e96-b623-bdb6c17e7459","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-gir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-gir.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fd6c2f-068d-5b38-93a3-2b7ba91258aa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-giris-guncel.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-giris-guncel.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2cd807f-81e6-55f4-a1d6-867eef16f570","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-giris-guncell.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-giris-guncell.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc9b891-5667-5270-8deb-3fce70d0ea47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-giris2025.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-giris2025.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf4608a-ab67-5385-9a31-543758d5067a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girisadres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6f2d61-64b3-5fd7-adf3-cbcf011dc3a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girisresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girisresmi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a0c8b0a-2c7a-56b6-84fa-1fb3ec6dd5e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girissadresim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girissadresim.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdca5bbf-759e-5d0f-9da1-bdd652802abb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girisvadisilas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girisvadisilas.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ffdfda3-2bf4-5501-a2d4-d4d745e6e464","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girisyap.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girisyap.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46958b3a-b775-5de5-851e-e2d94b9e7def","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-girisyeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-girisyeni.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f8a480c-ab98-5f4a-9b9a-6807d82c6e25","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-grisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-grisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adc75a8-29e0-5d00-9489-d07ecfbd0c2e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guncel-adresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guncel-adresi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--727702dc-d7df-537a-8265-f7b9f8b723ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-gunceladresii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-gunceladresii.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c15a971b-001f-5ed1-8afd-fd3a845a17fb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guncelladres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guncelladres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4db8c8-c4e6-5c2a-bea6-faf3c336d92c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guncelvadiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guncelvadiadres.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81c9731-eaf2-537e-a081-0c6ae76a1d13","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guvenilir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guvenilir.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40581f0c-db96-5b27-98e6-70e3133d2bbf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guvenligiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guvenligiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1be8fb-e81d-566b-999c-a7d0faa88da5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-guvenligirisi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-guvenligirisi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a23f60-4902-5e44-b9fe-9eaf23f50678","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-kolaygiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-kolaygiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcea1406-7eee-5908-9a7a-fd847c0c6eaa","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-mobilgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-mobilgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2d9bfb-95b1-5fd6-b14e-21678660dd51","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-mobilyeni.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-mobilyeni.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeceb126-8cb7-5d82-b4d7-69b4b0a2c993","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-official2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-official2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46c6bbb4-7a50-53ad-b58c-afb7d38a67ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-officiall.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-officiall.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55c450e-0297-5443-bafd-10db7d34f077","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-onlineadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-onlineadresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993a7741-0937-5d0a-a203-1f17722b789a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-onlinegiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-onlinegiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22826899-9fdb-599c-82d2-d0a5f40fb4c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-orijinalgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-orijinalgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a77294-3097-5fdb-b099-4a75634c7fcb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-resmiadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-resmiadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf94377-d65b-5617-b6ed-2637151064d4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-resmiadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-resmiadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--075028a9-5d17-576a-98fc-b0af53233255","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-resmigiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-resmigiris26.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0092b26-84c4-5685-b7ca-639f06589b74","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-resmigirisim2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-resmigirisim2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f5c315-c46b-512e-809a-7a8a1bb17340","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-resmiigiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-resmiigiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563d0fdb-0632-5611-ae6f-9025fc12f089","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-son-adres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-son-adres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b147ff-0693-59a9-b395-c0f8bbb9e981","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-sonadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-sonadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7180fd0d-1c29-5b51-a10b-a303c18348e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-songirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-songirisi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6e8d186-cc4b-5d87-bdfc-93b95d969f9a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-twitter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-twitter.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f4b5d8d-97fd-58a8-9821-66a53cbac945","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-vip.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3665f62-5c76-54e8-aa89-bd94b4d5cd76","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-yeniadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-yeniadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ab83bb-6d0c-53f9-8164-1ea8bd4d5376","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-yenigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-yenigiris.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e422d7c-12ae-5016-ba79-266153862a81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-yenigiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-yenigiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2c648e-f5c6-522e-a32a-1c4f96ed2a4f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet-yeniresmi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet-yeniresmi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a25436d-73ea-559d-9ab1-eb7364af76cf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1131.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1131.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5a8bc3-2cf6-5cd3-ba2b-49c5da5c6a71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1133.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1133.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a2c7f8e-6074-5aab-98d0-8517483e0dcd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1134.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1134.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47f09c04-7ef6-5326-a21b-fae1688f4861","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1137.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1137.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03c66084-14ac-59b1-aec4-989978bdf2bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1608.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1608.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5201062-f723-586d-a02d-aa8f532d1ca0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1615.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1615.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b869229-31b2-52d6-aeab-238b7592f1c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1616.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1616.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e05321d1-7c60-582c-8673-69c667f7472b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1617.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1617.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbfcff3-8ce3-502b-a34a-7500e90f2542","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1618.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1618.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22316ef-7567-5cf0-9c5e-ccd5e80a7714","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1619.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1619.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d80db10-55e2-523d-bca7-990166b6ddc4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet1620.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet1620.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85a50119-44f0-551d-bc98-72d6ceba7034","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet821.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet821.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6678085d-4af0-5c12-a538-0731480449a4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebet958.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebet958.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f07bef-60bd-573e-99a3-606fe13053ff","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetcanlislot.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetcanlislot.pro']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48356293-f2f3-5790-aa47-d3cdbca60d84","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgiris2026.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgiris2026.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c57fa05a-a8f9-5011-8ea2-e4f14e8a1589","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgirisadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgirisadresi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2e5bf49-c19a-5d52-8a6f-960bdea896f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgirisadresiburada2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgirisadresiburada2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e5ebb7-4ed8-5a09-a4a6-38435c1b9002","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgirisguncel.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgirisguncel.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68765949-7725-57e6-b981-3b7dc16b1329","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgirisi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgirisi2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77a481bc-8f63-59c2-8abc-6c01d21dc51f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetgirisresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetgirisresmi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a7a964-5083-5280-bb37-28c7002db0b0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetguncel2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetguncel2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf1ed13-2645-549a-b41e-9e5adc8bac0b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetguncelgiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetguncelgiris2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb734454-b1a6-58d5-b4d5-c2ca2043464d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetguncellinkimiz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetguncellinkimiz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99747aa5-e597-53a0-85de-1fda5b3056ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetlinkimiz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetlinkimiz.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eda4d48-54b9-5e57-a31a-58961590a2a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetonlinegiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetonlinegiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6979d5d4-c51f-537d-8c4c-8b87f53f7053","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetonlinegirisi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetonlinegirisi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14bdf51a-ed80-5c37-9397-acae409d5932","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetonlines.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetonlines.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af0e501-47ee-585f-84da-3618e5add24b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetorjinaladress.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetorjinaladress.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b710b3-baac-509f-b070-109d55e9c845","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetorjinalgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetorjinalgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0267a537-cb6c-5af6-aeb2-486e444667b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetresmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetresmi.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a50435d4-4d99-5d8e-869e-338d36c4323d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetresmigirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetresmigirisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed370bb0-ed5c-558d-817a-e1bd6b3c3c10","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetresmigunceladresi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetresmigunceladresi2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0abbb-e04c-51e5-998d-023ecc36ca69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetresmiyenigiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetresmiyenigiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada0541d-8010-5d31-ab7a-678e8b1bedf6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetsporcasno.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetsporcasno.live']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab9e87cf-c8d9-5cd3-883a-6d2e1790be71","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettgiris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettgiris.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dda2b246-d767-586f-9cb9-7c8855476512","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e2887d-add1-5d8b-bee3-de863c7386fd","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettguncelgirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettguncelgirisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c6984f-ce52-5255-8fc2-e89e0a045231","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettonlinegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettonlinegiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d44fac-9220-524b-a7fa-0ae1e51114be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8767175c-04f0-52ff-9f7f-0611ed33501f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettresmigirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettresmigirisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6472efec-24d9-544f-9b49-589f93ac7e6d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebettrgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebettrgiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717b018b-144b-5100-b05d-cd8d850c714a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebeturkey.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebeturkey.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22201042-3717-5682-bea6-6d1315f36c47","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetyeniadres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetyeniadres.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--976e1719-3e7f-5e4c-b895-2a77cdec17cb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betebetyenigirisadresi.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betebetyenigirisadresi.vip']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18ace98-51e0-5af8-bf6b-20aa43406b61","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beteexpeergiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beteexpeergiris.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--187db55d-b82c-5c67-91f9-d79b2c1f1cbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betegypt.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betegypt.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47ff6779-27a4-50d9-b925-58a59759a6d3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: beteves.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beteves.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8099c6f5-9a98-5a95-a95e-af0fe770b7a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betexper-betexgirisii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betexper-betexgirisii.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4972e91-dd1d-58ef-9aa7-e467e1608e75","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betexper-betexgiriss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betexper-betexgiriss.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd57937-a08b-51a2-a520-5911e710d67d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betexper-casinogirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betexper-casinogirisi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f71983-c781-55e9-b94d-31e756da0759","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betexper-girsi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betexper-girsi2026.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f90e5c0-a091-5666-aa9a-ff0b9c4672f7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betexperr894.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betexperr894.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16af05e5-015f-5e3a-92b8-c2520fe33aad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfair-australia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfair-australia.net']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f77dd30b-eda3-5233-8b3b-2af068abc6c6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfair-casino-colombia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfair-casino-colombia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56979d4f-1943-5501-94ba-d377eae43d43","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfair-casino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfair-casino.icu']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9ac399-f75e-570f-9ca1-8b05f435dcec","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfair-casinouk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfair-casinouk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f597d6a-7396-5717-9672-75c0251be49d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfairargentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfairargentina.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07c3b34-68a4-5e76-b37e-a5ef8c761873","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfairgame-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfairgame-uk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93bd7590-c671-5384-82d1-85a993466011","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfairwinde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfairwinde.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e907fa0e-18ec-5939-ab2f-2a44d2b2e1bf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betflag.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betflag.today']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa00fb9f-6ff6-5ca8-9182-e1ce92d86bf8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betflixmexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betflixmexico.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03dcfcab-5f79-588c-8d64-895edf015e6a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfredwinuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfredwinuk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa429a77-c57f-5cfd-a71c-211a7da3a3ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Malicious domain: betfree-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betfree-fr.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c63bea-0ced-55e2-b509-ed2aaf2b5a16","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 188.114.97.3 (31703 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.97.3']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b5cdcfb-16cd-5650-bf79-9804674ffbfb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 188.114.96.3 (31570 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.96.3']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82dd8951-fc79-5648-a237-bddbbab5641c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 91.236.116.210 (891 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.236.116.210']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b95ba7f-0d52-566c-8e9b-aab23100a6eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 104.154.151.46 (735 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.154.151.46']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c549eb7-07be-500a-ab6e-a0572d1957f2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.107.44.123 (630 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.107.44.123']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c135b64-fa86-5db8-b925-d00c348b16e7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 216.198.79.1 (480 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.198.79.1']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b68ccb-3fae-57f1-aa84-d505ea491ced","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 91.199.133.247 (355 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.199.133.247']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a196e7f-3651-586a-9a0c-f2c88b6d91a3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 81.180.92.199 (338 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '81.180.92.199']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--570cd9ea-64ff-5648-adfe-99772b5627a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 153.52.111.64 (327 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '153.52.111.64']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fae359a-c837-59a7-a241-76a9dae6ea6f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 193.187.110.202 (267 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '193.187.110.202']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf9997f-884f-5d83-b7bd-bdbaa5b15a2a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 216.150.1.1 (257 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.150.1.1']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b472ce9d-b0cd-5ef3-9450-1c56d8af0d81","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.158.133.1 (173 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.158.133.1']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df45119-0613-5ce7-b8fa-50ec4ec2c573","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 46.165.222.121 (156 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '46.165.222.121']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf985db1-a49a-5eec-b294-d62f80de426f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 92.63.227.153 (150 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '92.63.227.153']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a22e11c-c22f-5311-abe7-ef4b3ae24f8f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 159.195.37.180 (142 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '159.195.37.180']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ff9651-4cd7-5eeb-b437-1ba710a02979","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.231.154.42 (135 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.231.154.42']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e0fb849-347d-5f48-8f22-bf7fbe83e8e4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.127.84 (134 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.127.84']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507e1006-93f0-5dd5-956a-f12387e5f5ce","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 23.227.38.65 (122 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.227.38.65']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23add10-67e5-5912-8010-b45b9a52b7eb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 192.142.10.5 (116 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '192.142.10.5']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc199400-58e1-5ce2-982f-42f66a044119","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 64.29.17.65 (115 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '64.29.17.65']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99d9a9a1-032e-5f63-9308-8b59f15cae60","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.226.93.186 (112 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.226.93.186']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e590a691-71be-5ff1-ab96-376bc8a0cedf","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 156.240.122.104 (106 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '156.240.122.104']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72275580-0bf5-58af-be6d-96dc068ccecc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 5.44.219.13 (104 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '5.44.219.13']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afc82bd-a958-59fc-bddb-f13372f2bf64","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 216.198.79.65 (103 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.198.79.65']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be7d3da-7d0e-52a9-8694-c55b0960a031","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 64.29.17.1 (102 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '64.29.17.1']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7802865e-3742-5600-9769-41322ea0e9b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 202.75.216.212 (99 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '202.75.216.212']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9ff3e3-eef4-524d-9d70-83b2e6aca2c9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 34.111.179.208 (98 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '34.111.179.208']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936606c4-8f97-585a-855c-f7472c62053e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 75.2.60.5 (96 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '75.2.60.5']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03761340-cdd9-5406-a1b9-f1f4798e82e2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.151.119 (93 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.151.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c0ad49-7a5a-56eb-a95e-094f9d2604ca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.155.119 (88 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.155.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--531f6051-2b07-5d83-a8c0-f90e17cf4c5a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.156.119 (86 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.156.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d87dc4a-62ac-5480-aed2-3d2c68c9980f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.87.121.9 (85 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.87.121.9']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887b569d-33c2-5524-8dd3-404a40e1b4be","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.153.119 (84 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.153.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c34acb-303e-5c73-b6b0-0a6ab02423d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.150.119 (80 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.150.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582f245e-d6a4-59ab-b187-8d89257bd396","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 198.251.80.124 (79 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '198.251.80.124']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--488b6c70-32ed-5dc1-818a-1ae4f7228503","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.154.119 (78 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.154.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d696b4a2-4993-5842-ac61-1038b7a62ada","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 154.85.61.131 (78 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '154.85.61.131']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e183c99-f634-53d0-b731-f0c089243f7f","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.87.121.11 (75 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.87.121.11']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c6caa54-db22-52ad-9024-03575e35fddc","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.87.121.8 (74 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.87.121.8']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3fb7826-4b1c-5f19-98ca-b17ee9a57c98","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 192.142.54.110 (74 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '192.142.54.110']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--941af505-57f8-5848-8eb5-0cc6d5f093b5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 202.91.227.172 (73 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '202.91.227.172']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39b51ee1-977d-55bf-aa51-50eaa6a7c451","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.152.119 (72 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.152.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9b7f5e-d79f-5762-9005-6bbb9f3a23e1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 123.58.214.121 (72 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '123.58.214.121']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3397f9fb-ad0d-5341-bb28-f9dc9997f8c8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 76.76.21.21 (71 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '76.76.21.21']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44949fd6-a3fd-53da-898a-479492d4744c","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 142.251.157.119 (67 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.157.119']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17637795-49cd-59c2-b0a8-f7dc77fe9a70","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.87.121.3 (66 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.87.121.3']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--926519ec-68f5-5d5b-bbd6-cd6325d922ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 85.121.149.77 (64 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '85.121.149.77']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--233d77ca-258d-5a08-b86b-4b90b6bd4e34","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 202.91.242.20 (64 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '202.91.242.20']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5823376a-d766-56a4-84a8-6a4b43bd87b4","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 185.47.11.16 (63 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.47.11.16']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80e35ff-9146-57d4-b6bc-67787181f2ae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Shared hosting IP: 202.91.248.233 (60 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '202.91.248.233']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30e1356-cb7e-518e-8d1d-8306981c23a1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: donate@opencart.com (44 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'donate@opencart.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e54951-1704-5216-9136-69fac7dfdb38","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@anonymixer.com (40 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@anonymixer.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ea5505-94cf-531d-badb-5f29ac638260","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: contact@rocketx.exchange (37 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'contact@rocketx.exchange']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21849790-7356-592a-8b93-e78392c3d31a","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: destek@slotvadi.com (28 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'destek@slotvadi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6639f84-9d5f-5bae-a91b-010368fab2b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: affiliate@slotvadi.com (28 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'affiliate@slotvadi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4854d5b-b7b8-5d74-b506-d205d203a695","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: info@slotvadi.com (28 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@slotvadi.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d61e4a-2277-5abd-8b28-812dd82fbef5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@winshark.com (27 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@winshark.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6123994e-1076-5964-ae45-5893c29c22a5","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: info@wbahis.com (24 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@wbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1949b5ca-94e4-510d-9e52-d520f5676491","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: complaint@wbahis.com (24 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'complaint@wbahis.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e47174-f973-5c9f-a7c5-0eabeecb46a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: deine@email.de (20 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'deine@email.de']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c343e171-522b-5942-b5af-66b279fb81b2","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@highspin.com (18 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@highspin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d746ed7-ca42-5c4e-880f-9e504908ba65","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: info@stroykatalog.ru (18 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@stroykatalog.ru']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f130a04f-4144-58f5-a07b-2262cc40f1f3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@jojobet.com (18 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac61587-e454-54f9-ba81-975c549d6094","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: ornek@mail.com (17 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'ornek@mail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5ab07bb-e691-5b64-9197-d301535ac0a0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: partners@jojobet.com (17 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'partners@jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c216b3-4116-5471-ba86-42bf3bc69616","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: press@jojobet.com (17 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'press@jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5594a5-e808-58fc-9dba-68b937a040d9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: sikayet@jojobet.com (17 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'sikayet@jojobet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7552da9-f622-540f-a7f3-7ffe936986e8","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: satoshi@concrete.xyz (15 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'satoshi@concrete.xyz']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1d6c81-1c3d-5bd0-8168-ef7d51dc8465","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: seu@email.com (15 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'seu@email.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab89fc21-10af-57bd-848e-6ee2672da048","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: info@kulisbet.com (15 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'info@kulisbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b63e32c-1543-55c3-89d5-96036d7e9515","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: reklamhabertr@gmail.com (15 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'reklamhabertr@gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f624433-8452-59d6-a222-57946ec3f6ed","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: admin@learn.fitnesslifestylehub.in (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'admin@learn.fitnesslifestylehub.in']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1820bd-4489-5e0e-a81c-1d1298b5c4a9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: hello@sugarlab.ai (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'hello@sugarlab.ai']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767db912-6c37-5dc9-bc26-641ae84cbed1","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@dragonia.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@dragonia.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da54857-b6f3-51b9-a2d2-623f0bf48dca","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: tu@correo.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'tu@correo.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b70b2b-7e82-5665-bf9b-12d51e917fd9","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@changelly.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@changelly.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7240705f-b2bc-5145-8977-7cc0969843b3","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: privacypolicyupdates@automattic.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'privacypolicyupdates@automattic.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e948bc13-fc63-5dc9-ba42-52cdd65ea021","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@slotsvader.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@slotsvader.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9a1805-de34-5903-b4f2-a0eefcc22c69","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: kyc@slotsvader.com (14 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'kyc@slotsvader.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d8b17c8-1078-5f24-8179-2983359874b6","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@lizaro.com (13 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@lizaro.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c31ec4-7336-5535-ae30-fdbb011dffae","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@shuffle.com (13 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@shuffle.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c4d23f8-3f54-5aac-a320-8e5cad08f412","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@casino-ra.com (12 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@casino-ra.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c0b798-a670-5fd3-8f00-75cafc720e86","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@winboost.com (12 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@winboost.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c87820-c756-558e-94cf-8e4b9f8697b7","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@birdspin.com (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@birdspin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac1a77c-6816-5240-9acd-58c1ab650787","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: highspincasino@support.com (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'highspincasino@support.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01237b45-6edb-5134-af75-d801c20f0786","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: 11476@qq.com (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = '11476@qq.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--235fdf8a-b1ef-583c-88f7-1c9777e63a6b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: zayavka.official@gmail.com (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'zayavka.official@gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa934981-4bf1-589f-8604-76cf3d81a02b","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@betsnipe.com (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@betsnipe.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d35e9a-2f63-504a-8f98-249376c8bcbb","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@1win.social (11 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@1win.social']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fb6718-4c5f-57b2-b6a8-ffc4dd1cb221","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: tapchigiambeocom@gmail.com (10 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'tapchigiambeocom@gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09606257-a590-5f8e-84f5-194261cea5ad","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: vip@highspin.com (10 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'vip@highspin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66cb9714-5300-5a63-8667-8724978fa4ba","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@wildchance.com (10 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@wildchance.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc78dff-1584-5674-9dd5-2990901676e0","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@crhelpdesk.com (10 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@crhelpdesk.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b022cf0-b7a8-5158-9971-8c369b78e96d","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: amami.online@gmail.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'amami.online@gmail.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ab8cea-ca8d-5198-8028-42d1047bbd01","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@holiganbet.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04fad7fd-bca8-517d-b020-83602a339359","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: partners@holiganbet.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'partners@holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--033ecc15-c8b2-5574-9829-0377c24792ea","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: press@holiganbet.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'press@holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c621386-81d6-5f96-8b7a-a23b4dcad95e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: sikayet@holiganbet.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'sikayet@holiganbet.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f6d7d0e-55ca-5cf3-8229-b71258aae06e","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: ornek@email.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'ornek@email.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c3558ce-8c46-5a20-82d2-8bbb5f59a668","created":"2026-11-13T00:00:00.000Z","modified":"2026-11-13T00:00:00.000Z","created_by_ref":"identity--e794dbbd-d20f-5e5b-b1ec-cfa29b75112d","name":"Serial registrant: support@dudespin.com (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[email-addr:value = 'support@dudespin.com']","pattern_type":"stix","valid_from":"2026-11-13T00:00:00.000Z","labels":["serial-registrant","attribution"]}]}