{"type":"bundle","id":"bundle--8d805bca-7b32-52ae-a572-2eeadc4a1508","objects":[{"type":"identity","spec_version":"2.1","id":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","name":"PhishDestroy \u2014 Trustname Investigation","identity_class":"organization","sectors":["non-profit"],"contact_information":"https://phishdestroy.io"},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ed88f0-c6c6-5552-a952-2c3a4f6e8b9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 001kpayments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001kpayments.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--234029ec-ac33-5b0c-a009-bd7d8de7ef30","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 015id.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '015id.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4774c8-0835-51da-832d-2d529e292a60","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 07-20.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07-20.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc540e8-725c-5845-bd4e-a0e573c763d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 0805id.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0805id.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a788021-ba26-53bf-ba4f-fa16e595a833","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 0exallieviagraria.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0exallieviagraria.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc500f3b-4d92-57f3-9c79-ed243f31420e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 0nwin3156.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nwin3156.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29be798-b9b2-5b3d-b93d-f2cfe01f5de1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 0xff00.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xff00.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0f02f27-641f-568c-8186-c7da6f95fbd5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1-2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aaa2945-d610-5422-8a85-da1c78dbcf4c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10012bets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10012bets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--791b4899-4351-5f4c-ac3d-6fd48591438e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 100mg-doxycycline-hyclate.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100mg-doxycycline-hyclate.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17b6669-efe0-57f0-8fcc-6caaaba5ac8e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 100mg-hyclate-doxycycline.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100mg-hyclate-doxycycline.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a137576-05f9-5ff5-8810-3ef7403354eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10108bets10vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10108bets10vip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--baff92ea-e022-5df4-a949-a50cd7338e94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10109bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10109bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b6d205-0c99-5972-a390-29aee3bd84f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10112bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10112bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--346c59cf-463f-5739-8690-8796861125cd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10115bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10115bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e1c511-5759-5ab9-b6c8-5de4d0ce0660","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10115bets10yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10115bets10yeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b958299f-9263-5717-a833-26747c373005","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10119bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10119bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f53ce7-fb54-556b-82d5-574c5481ff51","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10120bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10120bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--985d6924-af2d-58c9-9203-358a0b5dabdf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10122bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10122bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea0a403-9cca-523d-b636-9a622c98e296","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 10123bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10123bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f243ab0b-d96c-5e82-9b97-644a8188ee97","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1017-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1017-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8482dc3b-4b60-5486-b72f-f853058282f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1069celtabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1069celtabet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--111b9155-cffb-51df-acaa-e771f17be5fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11526bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11526bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--224850f4-5cad-5edd-9502-087df252908c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11527bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11527bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48ba1096-f421-54d5-8276-c07284d905e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11529bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11529bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a19562-2348-56c2-9d41-4fbdd83ae3ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11530bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11530bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--979885a3-ee19-544f-8cba-5298a92589d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11556bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11556bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfbc8d68-288e-5ac1-9934-d96f910ae813","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11557bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11557bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b18310-35d6-5e13-a496-34add961ab7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11560bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11560bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb727ab-ee1e-5236-935c-d102a2d3d167","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11561bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11561bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f157dfcd-4ab1-5ea8-9a7a-13566f8b8605","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11563bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11563bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c4a1ae-57e6-52e8-ab35-14994adb175d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11564bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11564bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae36e980-275b-50cc-9693-8707f4e7d6d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11566bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11566bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc16951-b1a5-5a43-bd8c-a2bd3613ceb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 11569bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11569bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebe154a-83d7-5e93-a306-35a3071a9bd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1185madridbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1185madridbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6065aa3a-18e4-5756-8fec-abaa6bbaf43a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1280betebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1280betebet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af77e5cc-5ddc-505f-9c98-951726c5671a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1334bets10yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1334bets10yeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b223a5a-c513-549b-8f57-244332d67d1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1339mbets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1339mbets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a19b188-0161-5a53-a393-5787ed0d5cfa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 135874coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '135874coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d983c556-4df3-5bdd-8326-5263d8765b14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1423bets10canli.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1423bets10canli.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--469d2f7c-f9ee-545f-a95d-3bf8bb1fc961","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1468mbets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1468mbets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de24143f-3f38-5934-b9bc-eabc1b747394","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1472bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1472bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59e6942f-153e-5a2f-b791-d90456097b35","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1481bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1481bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf25e85b-0877-5c8f-8482-cd4a91013854","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1482bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1482bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22516bd9-4cb9-540d-98d4-4f0eaa4f671f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1485mbets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1485mbets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7882717-2d1b-59ed-85ee-b725886a4992","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1486mbets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1486mbets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e170bed-7387-5597-967d-e2a40ee7c31e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1489bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1489bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af693fa2-53b1-591a-af98-641488580775","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1491bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1491bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--982ca75a-9bc0-58ce-8b27-7f550b663dcd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1494bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1494bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfec0733-9254-591c-848c-5c05d9d61373","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1501bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1501bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b6980f-1ddb-556a-9764-3efc25e00909","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1504bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1504bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f37deaf-8689-5db7-99ab-18b893907896","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1510bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1510bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e51e73-8036-53cd-a2f6-1adcfc5bdff6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1511bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1511bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d1fd6a-2b43-53bf-967e-18a7c3442d4a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1514bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1514bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc916cf-addb-514e-8f34-39ebd598023a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1515bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1515bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a8efc6-b90b-5187-8e02-9b13103325c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1553bets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1553bets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdf761e-c54e-53f0-9c65-7e60a4bf741b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1821bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1821bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4641a520-7a00-5cbe-a7fb-da77877135eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 193719e8281.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '193719e8281.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb81431-7e3b-5d58-8ace-3cfd61b7f4a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1bmonlinesupportupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmonlinesupportupdate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d636423-01b1-510d-8897-6ecadfb24c87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1bmtlonlinesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bmtlonlinesupport.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6edb90f0-540f-5b85-9bb9-fa93f5dba127","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1cibcmobileverification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cibcmobileverification.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5274f15-84a4-5ad9-9295-059ec48107de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1rbc-sapt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rbc-sapt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c1f739-4f71-5c78-b9b1-63491ef3f5ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1win2o26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win2o26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5595142-cbf3-578f-b1fa-000a8e845735","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 1xbet-2026guncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-2026guncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667d3404-88ba-5b79-a5c8-01846e883e11","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026agncrevnucd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026agncrevnucd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--422747e0-896f-5879-9210-6976e0518499","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026carvnuegnct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026carvnuegnct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba810ec-58c2-59c0-a426-d9d3c4155ee1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026cdnrevnueagnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cdnrevnueagnc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fae1822e-2474-5c79-a2c6-fb20fca32f5f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026cdrevnuagnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cdrevnuagnc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebaddd2-df10-5207-bdb1-3076b8735d20","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026cdrevnuagnct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cdrevnuagnct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55b4b9d3-241d-5fd5-b220-9c318cdff52a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026cdrevnueagnct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026cdrevnueagnct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5f1c6e6-4441-53be-a6f6-1990b851f805","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026revnuagnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026revnuagnc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64b8243-861b-572e-b719-ba05fcf6d0a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026revnuagncd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026revnuagncd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7b31f4-878e-5131-93b5-cf3e95192ee1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026revnuagnct.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026revnuagnct.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37646d1d-22de-5f83-9232-1cb91cc4248d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026revnucdagn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026revnucdagn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1430ec5-32eb-5f7e-be65-ac2c4f68845f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026revnucdagnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026revnucdagnc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c75c049-e3c2-51e7-ac73-6c4147d16b53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026rvnueagnc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026rvnueagnc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd48cf3a-9b6e-5d13-980f-77843388266f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2026rvnueagnct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026rvnueagnct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ff7f66-5634-56d2-8436-ff9df8694080","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 202carvnuagnct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '202carvnuagnct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82be356e-2454-5e5b-8f03-2a4d5c1f74ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 21-07.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21-07.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4aeea1e-047d-502a-b80f-5551afcf4303","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 21g-investment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21g-investment.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee99f8c-aa1a-5ee6-a400-b5d66e3ee77d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 22-07.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22-07.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b7f953-8601-5b07-b831-f4fc2ba49e3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2960matbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2960matbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd7a8bde-5da0-50e9-9eea-ff0ec0091b0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2fabmo-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fabmo-secure.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f4b8e1-0c99-595e-9fcb-b6017b5402d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2onlinescotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2onlinescotiabank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5caec0-64c8-5903-9879-35cbc4b4a539","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2sveasywebtd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2sveasywebtd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--988c3be4-54a0-5517-bef0-ad5f087e858c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2svscotia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2svscotia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c0d3ef-1286-50a0-a634-106a50dc50e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2svscotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2svscotiabank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89da4df1-5236-5d7d-9594-0d2f4ce483cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2svtd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2svtd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05a72b6e-2c8d-5d7e-b946-818cb1271988","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 2svtdbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2svtdbank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe48a692-991c-59ab-a427-58dd55df78c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3149-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3149-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc1982a-37c3-5f0b-a971-9b59408010ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3195-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3195-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f651bd2d-1ae3-57b2-9b9b-8f91ef1167f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3415-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3415-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7967026b-3a93-5df4-8ccd-0b56c3ce6a07","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 342109coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342109coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a997ce2f-905d-55dd-abe7-bc6b6cdde819","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3425-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3425-crypto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2bcbd3-2e65-52f1-9d23-344d4326a6c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 349primebahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '349primebahis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--790e6410-3ab9-503d-8e14-843c3c0acfb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3758-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3758-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393bb043-22fa-5f81-b6cc-e038b7bce6cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 379502coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '379502coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6c2395-8fe6-54ca-b9da-c1b045510107","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 394823-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394823-ledger.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73aa1626-27c2-5070-88dc-4e30cd5518a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 3xcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xcas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb5639a-302c-585a-a0c3-b928a48f7178","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 429532-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429532-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df071627-5772-58f9-9c78-253280bab42a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 429535-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '429535-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cda0d5-b366-5628-a9cb-b7ef47e52149","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 4332bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4332bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e20b5f4-17df-539b-889e-442102bcd675","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 4337bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4337bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4262bd4c-151f-5b5a-808a-381292d82c98","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 4338bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4338bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2454bc73-4f7d-5c3c-9b9b-5ef27b1dcd9d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 4374bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4374bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e48c2b-935d-57be-9709-26a52d678dfe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 47050.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47050.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35a71c33-86b3-5895-a659-eed56dde39d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 482942-log-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482942-log-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c792847c-0687-5611-9099-8fb2eb7c4a71","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 492953-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492953-ledger.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8550da8c-652b-5f21-a705-1112895f7130","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 500mg-metronidazole-flagyl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500mg-metronidazole-flagyl.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32ae45d-9b06-5b17-a46f-20aa8a579ba2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 500mg-metronidazoleflagyl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500mg-metronidazoleflagyl.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dcc177a-b597-588f-825b-fd52f050b7d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 5299324-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5299324-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25f709b-1640-55f4-a7cc-2862942fb943","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 557sonbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '557sonbahis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21133f38-340f-55b3-b443-74cd9c135960","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 582922-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582922-ledger.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f542740-da04-5017-904e-5c8a29635989","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 58293-login-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58293-login-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e4786-5eaf-5060-a34c-d212b98771eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 582994-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '582994-ledger.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4976376-747e-523a-9af1-60a9d1030e22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 684935.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '684935.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c68836-39c6-53ad-b1ca-0bbbe4060e5b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 691223-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691223-cb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c917e8-7473-5b6d-a157-62957b11de45","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 691223-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691223-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--024318e2-8ac1-5344-939a-a8a2192f8090","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 691223-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691223-crypto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4475ab-1179-54c4-9dc8-0e7fb1fecdc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 6ba7b811-9dad-11d1-80b4-00c04fd430c8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6ba7b811-9dad-11d1-80b4-00c04fd430c8.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcda263a-0c9d-5cb4-93aa-bf8a3c5bc24a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 73mc-v1n1-c3rg-r4f1nd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73mc-v1n1-c3rg-r4f1nd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eeb0cd5-d0e8-5aa2-9f45-470fd6d279e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 791223-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '791223-cb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32560076-e927-57e8-87b9-a3bddf184cc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 7orca-ag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7orca-ag.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60bd0bd9-17dd-5028-8c24-9187a94fab8b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 830129coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830129coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd9c57d-dc8f-5cde-9f25-5391d98df2d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 873jetbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '873jetbahis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e74d38d-c100-5fcd-b99f-e5616a4bec5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 88dog.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88dog.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6154567-2325-5afe-bbca-cb441dd2135a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 902346coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '902346coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed835f77-d535-5a88-9e99-6c1a3662c15c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 922proxys5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '922proxys5.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc29667d-5edf-5cdc-b89a-24b99fa502f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: 9944casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9944casibom.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea7e685-7d57-5504-a64c-0e19e6db2082","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aacdl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacdl.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9343482-ce5d-5cce-84db-35b665f7974b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: abcinvestmgt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcinvestmgt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2728989b-34bf-505b-80e9-f7322daf4926","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: abet.bot","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abet.bot']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3b9ef79-3da7-5216-9d8d-22d059f36000","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: abrevnucdagn2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrevnucdagn2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace0e56e-d7dc-5de2-957e-464757ef368c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ac2serv.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac2serv.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d9cbab-363f-5522-9cef-45591c072acb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: accposhmark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accposhmark.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b2724c-c0b5-5a6b-b82e-91b117225b1d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: achilles-de-santana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achilles-de-santana.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e405c751-1c01-5177-9ebe-33ed1daa0370","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: activation-rbcbusiness.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activation-rbcbusiness.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b5e62c-7ebc-5ef0-8681-ced1933e6cfb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: acw3ke35vqzzm7.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acw3ke35vqzzm7.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aab194c-b827-51b4-97d7-95fbe570dfe1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: admin-extranet-signin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-extranet-signin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--189ba8a7-4e03-5660-800e-2c0059c667d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adres-bets10live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adres-bets10live.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03267603-67aa-557e-9e4f-cddb51a59023","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adres.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adres.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a1772d8-62f8-5307-9a19-729092226c12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adres.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adres.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87a37936-da11-5ae6-8287-f90816e2a86a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adresi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresi.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27dd4896-d6c5-5498-9e3b-5bada2a0f0aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adresiniz.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresiniz.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--230add6a-5412-5715-8f51-d0a60b01c60c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adresleri.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresleri.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--407090bc-1ff3-591d-8b07-78c4315f4e67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adresleri.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresleri.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1de0939-4b76-54e4-a1fd-94e1939fcf41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adresleri.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresleri.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d30f65-5928-5c12-a143-9466438a20ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: adreslinkleri.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslinkleri.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3715b96-4714-5c57-950a-fa48cf8f0b2e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: advanceslibrary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanceslibrary.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2428becc-0c50-5eca-a2e6-b4b3b75891b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aerodrome.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.qpon']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3a8ea8-a054-5490-918e-5aba306f92bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aeroworldflight.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroworldflight.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--477a9f79-3841-5a62-8c24-2c72e5359578","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aeroxwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroxwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb17c28-eb29-5e76-8ee6-d6b996822c25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aezabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aezabet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c28c68-dd2a-5979-a89c-068182ed97ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: afetyardimlari.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afetyardimlari.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c635095-44a0-5ab5-96c5-7104df228001","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: afi-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afi-protocol.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b05a14-0873-5c2e-9da8-3ed49b881fef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: afi-protocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afi-protocol.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3523cd9f-1471-5efc-92af-85a9614ba30a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: afinil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afinil.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--804dc6ef-d288-5136-aa58-d5db94843496","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: afinilexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afinilexpress.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ff1bec-1302-5cce-a174-210d7e8b3eb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: agrtraptmfrlnce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrtraptmfrlnce.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4b4786-ea77-55d5-8c90-01c10823a4e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ahp-management.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahp-management.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a72cc6-221a-5ed4-9b15-cdacee85e707","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: airplus-inter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airplus-inter.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--995cf3f1-d15d-5a3e-9278-2f02c5fe5cfc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ajudandoumacausa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ajudandoumacausa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22adc900-b43b-5d1a-af5c-fcd053f39448","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aktifdenemebonusu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aktifdenemebonusu.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed8ac94c-d0db-53dd-8c6f-aeac8081bfb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertmycibc-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertmycibc-ca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f51d03-f44b-50a9-9622-78c745d7b5d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertmyscotia-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertmyscotia-ca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a43f2689-b3c5-55c3-a3ef-258a113a567e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertschecker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertschecker.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaaf5d6c-9843-5437-978c-e45b6a1fc1ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertscotia-mydevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertscotia-mydevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f52557-b6dd-5052-81e8-757dda5c973b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertseasytdweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertseasytdweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b550a2-78be-5b9c-83bc-1d7bdcca04d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alertsetup-td.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alertsetup-td.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8a05e3c-d04a-5808-a06f-e5582717b26c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alfabahis-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfabahis-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2b71e8-05b8-5651-aa3b-025a186d7366","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alfabahis-firsat.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alfabahis-firsat.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--507c1e0b-00d0-5475-beaa-538844e1c78d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alhighways.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alhighways.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80eb2c1-1250-5f37-8bb2-ef344b8a9eda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: allcap-partners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allcap-partners.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b72fab0-c73c-50b8-b401-cdb6dcba6555","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: allocationcanadiennetravailleurs.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allocationcanadiennetravailleurs.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b561c6-f372-5e73-8f01-31196fff5cac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alluvi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alluvi.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62c5440-71eb-5d8f-941e-1bd1cf7afe7f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: allyspin-casino3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'allyspin-casino3.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a0cf2c8-544e-5aac-9459-4c3387add012","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alobet859.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alobet859.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a442ee7-5c3f-542c-8910-8dbc26a0dd54","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aloxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aloxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d28d153-ca35-5d31-b299-d0abb5201616","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alphaglobalt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphaglobalt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca972cba-bf1c-5327-8d2a-0bbd9a7c028e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alphamegapharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphamegapharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--281d847f-55c9-5c55-b818-bdf2244726ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alphanote.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alphanote.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7b63b2-0747-533c-9920-68570f491cbc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alrt04-profilereviewcra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alrt04-profilereviewcra.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa0bc80-07cd-5773-952b-202f08cb1f6c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: alternative-bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'alternative-bet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac565ec9-3a7b-5e9d-a42c-1e84308abc13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: altura-trade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'altura-trade.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0d267f-a752-5d39-bcf3-26dcd554e6e9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amazon-slotes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amazon-slotes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb0fa02-a6ef-51fe-88d9-128657a0f4e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: america-win.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'america-win.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1852b007-f39b-561b-b9ec-0f1d04b55b72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: american-express-nb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'american-express-nb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bbc40a0-8037-5e34-90e1-af3dd05239d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ameriode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ameriode.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e810891-486c-5841-b4b8-0aebe9ca7e85","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-app.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fff5394-11f6-528c-947c-f41415ade637","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-auth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-auth.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--824f7737-e404-516d-9d98-9b7290086b4f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-banking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-banking.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb02d292-2481-533a-b406-8c7e7e40dfa7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-check.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-check.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50fe22c7-bcdc-54a3-a546-d8b84d10d871","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-help.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d44b687-776c-5600-8c46-b7abfcce6872","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-helpdesk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-helpdesk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d39538-8621-590c-8a7d-4a96df4b6970","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-safety.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-safety.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45806c0c-48bc-54c7-8a6e-90281e3761bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-security.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-security.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12957216-b2de-571d-86dc-801db987b984","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-service.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-service.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2893af27-7406-5d96-99e1-3be21eb78069","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-sicherung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-sicherung.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c198670c-0f3b-5c1e-8a3f-fc187ca80545","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amex-tech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amex-tech.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba58768-2148-5922-a764-cac536e50f20","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amgbahis1180.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amgbahis1180.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a1db3b-c497-5aa9-9f63-0062e5b8bdbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aml-tracer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aml-tracer.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc4412a-9d7e-5336-8537-3cdc76c604a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amlbotfree.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlbotfree.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ae2015-0edf-5417-9a75-a1dc9d0dfa3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amlpro.llc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlpro.llc']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a93c469-a14e-541e-8cb4-11a5b6d72ac9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amlxbybit.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amlxbybit.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee11fd1-8fa9-542f-af0d-d00b44a62ec1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: amykathrynduncan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'amykathrynduncan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2a2d47-0b89-58c7-ace9-3f29b03b8f07","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: anabolenxxl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anabolenxxl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc59cb0d-3c7c-5b95-a21f-ea240ba1fb54","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: analytics-assess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-assess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a553f4f5-b09c-5300-8fa1-0524a391d05b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: analytics-wss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'analytics-wss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ddfc8f-7d14-58e1-a238-919ab579aa16","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: antrag-klimabonus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'antrag-klimabonus.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e73f0034-9e1a-58f0-98be-fa48223dd6f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: anubismarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'anubismarket.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07fabb9c-d02d-5494-8e1f-657735bf86c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: any-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'any-swap.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9c6f3b-b616-5bb4-bc96-a5bb1bf0284c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: api-ox.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-ox.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8072a517-3221-5c62-a5c8-645a46c819a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: api-ox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-ox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c21365f8-98e4-52f0-b507-2c346388d7e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: api-walletconnect.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'api-walletconnect.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65690209-6f4d-58c6-8302-1d63f06ed0ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: app-benqi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-benqi.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96c78b3-770c-5031-a001-9cc3ebaa7232","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: app-get.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'app-get.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4669eb7-469a-5f31-b2b2-638b96f41caf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: applyaeperkspromo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applyaeperkspromo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2d2948-07e7-51e2-8841-f94a2f26aaf1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: applyuaeperkscard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applyuaeperkscard.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa912ed-b8b2-514b-b060-726ad74c6c9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: applyuaepromo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'applyuaepromo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff98581e-a9e4-5513-a3e3-bbbb5d4c17e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: appnotification-scotiadevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'appnotification-scotiadevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26de249c-6dc9-56ae-888c-4b407a4fa54a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aprobacionidentidad.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aprobacionidentidad.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--030c80a4-5e28-55e1-bc91-c7190294da5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aresbet-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a101bd1-98e3-58bf-bea4-d620188ea79b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aresbet-hepgir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet-hepgir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d57b173f-d6b5-5c24-aa05-f34bdf85048c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aresbet9l8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aresbet9l8.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f706911-482e-58f5-b9c3-d921a2be6796","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: argent-reel-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argent-reel-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f8bc93-c21f-5046-be43-1d86c1a85efd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: argonex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'argonex.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4896e32-9371-5661-bc11-e0c5323d93b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: arret-direct.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arret-direct.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4716a1c-c936-5cdd-8972-bdbb1d6264f6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: arret-doc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'arret-doc.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d90b14-6907-55ec-8b64-d6268a51ee5e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: artemex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemex.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9aed916-a489-5e8f-ae4e-d278e4361f2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: artemisbet.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba98d45-7978-598f-929e-e4d9fda1b8fa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: artemisbet2171.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbet2171.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0aa590c-b470-5207-8a72-2147955abe86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: artemisbeti.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbeti.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a168701-ba8d-57c2-a2fb-c0f206f64ce2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: artemisbetll79.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'artemisbetll79.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b80703e-64ec-57e2-83f3-ebbea4f92d10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: asiabet-alternatif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'asiabet-alternatif.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5234194-8b57-513d-82ac-2f9d4d04394f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aster-trade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aster-trade.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8df01c-d1f0-50c0-9e3c-b7e17c2d04d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: astral-finito.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astral-finito.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2815525-78bb-548d-92b8-f426374069e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: astrixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'astrixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17643c7d-7756-5488-95e1-4e6210716adc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: at-identifier.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'at-identifier.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--112c12fa-2f2f-5829-b53b-1a0fed19a18c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: atposhmark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atposhmark.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb6dfd21-fb7b-5bb1-9784-506845fcc27b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: atuwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'atuwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04875bb2-202d-595a-84bd-e1e71978fd22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aura-finance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aura-finance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e5c3b27-e554-54d7-9826-a801125fb81b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aurawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d95b67-89b1-52c0-a4f3-132099ff64ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aurex.trading","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurex.trading']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3fc0465-4fe6-5004-9938-33ef362c06ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aurionexcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurionexcapital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a4c6c5-6397-538c-94e0-3079acef5455","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: auroraspel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auroraspel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1167e83-b60d-5afa-8269-b232ad59c2a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: aurumpay.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aurumpay.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c4fca24-b30b-530b-96d6-35d8b04d870c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: auth-connector.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-connector.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2321fc-53cd-5169-8a46-437ec75cbcce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: auth-rackspace.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-rackspace.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d313e6c-5cc6-5c17-a329-77cd6813cb66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: auth-user-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'auth-user-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9702a1be-d141-5c08-9fa2-6dc32452fbb1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: authenticator-rbcsecured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'authenticator-rbcsecured.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecb51e5c-3a32-505e-8467-2e81aa9b3059","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: autorlock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autorlock.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b5ea2d-1c29-5a56-ac75-bb0b43ae0588","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: autorsecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autorsecure.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3619dbfe-5230-586c-be70-00c9e237a24f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: autorservers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'autorservers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb88b76-36e2-5f1f-a0b0-1d12f1e9ae1e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: avncdn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'avncdn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84aaf0ea-a011-532a-86f9-4ca519f4e012","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: axispanel.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'axispanel.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bab125f-e813-5b66-9cc8-26163cdf20a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: az-olymp-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'az-olymp-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b95423-59b0-5d4f-b87a-1a3d439d0ca0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azerbaycan-mostbet-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azerbaycan-mostbet-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a34d2d-83a5-58fc-8673-8fff2beec426","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycin-buyzithromax.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycin-buyzithromax.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d085f2a-f147-54bc-9346-32115c763333","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycin-zithromax-online.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycin-zithromax-online.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d258f2-f747-526e-975b-1ba1355df6f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycinrxshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycinrxshop.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b895a4f2-73c8-5d79-812a-523f9664291e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycinzith.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycinzith.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e118450-1aab-5dda-9c60-ea9b8ceb0887","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycinzithromax250mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycinzithromax250mg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0405b1d2-9fd4-5b2d-bce1-1a7d0c170d19","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: azithromycinzithromaxbuy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'azithromycinzithromaxbuy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07f0622f-cae8-5e22-a39c-e0208dc0ace4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: backedupweb3quantumledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'backedupweb3quantumledger.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c644bcf6-735b-54a9-9a2f-991c02c3d5ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahisaktifgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisaktifgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d409864e-2e8f-5d34-b835-c60927dcfd40","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahisfair-guncelgir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisfair-guncelgir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10110e1a-f730-5348-a05f-73cfca81ac6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahisfair-oyun.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisfair-oyun.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c2693c-2635-5fa7-b21d-0b37cf2a5e5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahisgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--151c01e0-0aba-5076-a0a2-a1c4e61f102e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahisgirisler.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahisgirisler.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1694049b-ef44-55bb-a986-d0d5e24ff90f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahiskorumam.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahiskorumam.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39b39d5d-4787-54a6-9a25-93eb5cafbded","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bahislion-girisadresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bahislion-girisadresi.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48df9557-31c4-5dab-9c1f-bfa06ca53abd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: banca-rs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'banca-rs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2039862d-3812-56c7-9b1a-5afb58b2ef37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bancabogota-casas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bancabogota-casas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f61f53-3aa4-51b7-95f8-5c1fc5aa5282","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bank-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bank-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c8c3182-395f-5b88-a439-bc07ae0cdafa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bankid-felsok.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bankid-felsok.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da5cd42-9063-520a-8edf-caf8ea44cfbc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: barewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c07a9975-0519-5940-921d-a43ae769e5c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: barkwins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'barkwins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f02ccf0-bfa2-5fc6-b48c-b912eb8c1a78","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: base-tw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'base-tw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0fa4fc-8b6f-54da-a762-ffd1710ef833","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bastwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bastwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a17291cb-c91e-5ffe-8248-7064d734ec3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bauda-portal.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bauda-portal.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30531513-5ce9-5640-b5d6-ebcaef1c7356","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bavomex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bavomex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--febc92be-1ef6-59db-8982-6d8f76d58008","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bazowin781.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bazowin781.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8688ca1-30bf-5be8-8e0f-a25e90a58fd3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beamwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beamwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde08019-b4ab-5885-a4de-96583b572d65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beast555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beast555.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f76662a3-f431-5069-8a87-8eac03ce829c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastake.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fabb1d9-2517-5af7-8017-86d1a0c39e9c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastara.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1e662c-7130-5684-b6d6-1040d2ec84e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastcasi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastcasi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92a9ddf-8aae-5ca5-bc0e-dd2bc1c35863","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastduels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastduels.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--375c621d-d667-52ba-86f9-95f0c23fe48c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastfinals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastfinals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b629539-4b60-5bc9-8609-c6fd128b53d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dee4d120-f1f9-5211-9bcd-f2bca82587a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastmon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastmon.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0662a283-f368-564a-8e95-3ab49ee6cd6e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastnoxe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastnoxe.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7370533-ae05-5c22-9d86-fe6549f41804","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastquests.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastquests.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf87a43-c8b3-5c1f-89c2-2d734eeb8203","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beasttrials.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beasttrials.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d423c7da-cfa8-565e-aaa5-e01dc0b83811","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beastwin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beastwin.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c1feef-7dfd-5143-b4a5-10764136944e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bedofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bedofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b40888-1e3a-5887-abf8-ffcf529ed891","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bedovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bedovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e188829b-f7b2-5db7-894c-b5546fcf3458","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bedumex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bedumex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf15d0-1ca2-5bd7-82bb-f1e7c253ce94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: begowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'begowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f3e88d-d474-5ebc-86e0-670c8b9fc958","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: belfius-equities.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belfius-equities.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57606317-0ed8-5c32-b62d-acc85a0ae1e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: belist1788.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belist1788.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a4cfc5-469f-564e-8557-ce3b4f31f85e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: belrule.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belrule.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e3bdfe-187e-5bf1-bcd3-125deade98f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: belysekamikazi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'belysekamikazi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9093f0cb-f0a9-5514-93b6-9fa48fe182ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bemowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bemowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b522b4d-96be-556e-b5cf-6defc2647bfd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: benefitcgeb-cra06.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benefitcgeb-cra06.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8ccca6f-1f91-502d-b05f-77a474c46ed9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: benomexy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'benomexy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0131b2c1-c7fd-56ec-b63e-fb5f9ddff679","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beowux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beowux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b96c83ce-c986-56a1-aa96-d33ca511bea9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beradrome.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beradrome.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3f7937-d0a7-5b29-9b48-702179102092","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: berkcred.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berkcred.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e686f6d1-cb9c-561a-8194-9fa01fe0f8ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: berliner-konzertkalender.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berliner-konzertkalender.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b48096-8f14-5bff-a992-05a12d4c71c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: berudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'berudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--995a92f3-e49e-5062-8715-4151a57cc179","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: besobin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besobin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58da1874-ac58-59fd-8c51-300e99521a7a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: besofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7963fb68-f8e4-5c04-afe0-a397e6b0762f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: besovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4228f01-7ae6-5de0-9234-bae58c3dacef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: besowin156.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'besowin156.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb902926-6213-5959-a45f-19c947b80f9c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bestmove798.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bestmove798.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aadcb0fd-71de-5498-a239-dd665a64cf42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-adres.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-adres.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc1c209-55aa-5d4c-b22e-cff219f47996","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-adres.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-adres.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c452569a-f7e3-5935-914c-b942a2fddd17","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-adres.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-adres.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e36a5c32-cb1f-551a-8126-0c41958016f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-adresleri.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-adresleri.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e865e38-cb1e-503f-a083-5362d0cc4426","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-aktif.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-aktif.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61a73cf7-e7d6-5293-8910-750e1351e34d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-aktif.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-aktif.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5875333-c355-5879-b42d-ab2585d32c71","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-analiz.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-analiz.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02949633-8e21-5962-9aad-1e48c16d3de4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-bonus.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-bonus.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6b53123-6927-55c2-9c50-f96eceb421e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-bonuslar.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-bonuslar.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9998068-e34c-5375-99a8-9dec97d3ff9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-destek.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-destek.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21190232-a7ea-594d-89ab-0ac21bb56677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-erisim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-erisim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b7ae3b-7973-5b27-89b7-305f790ff96e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-erisim.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-erisim.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aec63e9-5de9-5fef-b1bb-d7c604c17413","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-fast.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-fast.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17e93294-a493-5a4a-9dc2-607daf2439cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-fast.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-fast.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7dd0289-0237-566c-bb68-a2d8ed5a8d92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-fast.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-fast.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cddfcdf8-9903-58d5-b708-0799e8da29a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-firsat.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-firsat.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b851675-a981-5b59-ba7d-72c77a700776","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-firsat.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-firsat.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ffb01a-4289-54fa-8b35-874e715cea81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-gir.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gir.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53eb06d-c9c7-5bf1-84d5-962ba2f8cb0e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-gir.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gir.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc45177-1e94-5bc6-a93c-68d1f058b23b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-gir.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gir.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ba3e16-d8cc-5e2b-8038-86dafbf649a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-giris.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-giris.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df42290-2560-5246-9164-99b7fcb28781","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-giris.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-giris.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fffe004-6c38-5492-a0ec-904d23979bfb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-giris.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-giris.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffd98e9-5f4f-55e0-8eba-1bcc1b5e4a37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-girisi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-girisi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87d6a9b-b823-51c5-9065-c723f03492db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-girisi.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-girisi.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe183a2-7c9d-5956-b9bf-7fa97426dc27","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-girisler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-girisler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f828ec9-9f3b-5a17-bed4-2be2013caa98","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-girisler.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-girisler.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f54733-cca3-5186-8e26-331f1cea3b2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-girisleri.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-girisleri.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6160e3-fae5-5d7f-8cbc-67df3c1029cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-google.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-google.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9242f9d-1ca5-5b61-baaf-a9d3d64d78fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-guncel.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-guncel.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e2d068-3197-5c53-87d4-a6372ed73fc2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-gunceli.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-gunceli.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eaf1237-f0d4-5f0c-b32f-989db78daa37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-hizli.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-hizli.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cd6d51-33e5-5893-833c-005850ae1c31","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-kazan.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-kazan.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2111d7d2-b79b-5e1e-9bce-ce89cfed1e8e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-orginal.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-orginal.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0175785f-f079-531e-bdeb-0c01abfa972d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-oyna.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-oyna.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0edeb6f-c129-550a-b5e6-c519d2c3ee82","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-resmi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-resmi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d328c7-85a2-5158-a6a6-60e2a7efd657","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-resmi.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-resmi.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91793ab4-8f80-552d-8079-34c2be9d38e1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-sayfa.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-sayfa.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1a11bf-1d0d-5601-b3f5-5229d79e9fa3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-site.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-site.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1f40e4-6c89-57c7-8877-c6d397fb1183","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-site.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-site.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dc2b5d-4d94-53bf-93d7-f74df64f5a0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-site.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-site.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2859083b-d800-57d3-b3a6-fe795c9bb43e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-site.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-site.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60783754-c73b-5eb6-ab27-e7ab0159c995","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-sites.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-sites.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff964cf-e926-55ea-8c08-fa398cc04a37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-sitesi.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-sitesi.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffe14e8-05b3-54d2-b0b9-a497b6479cf7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-skor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-skor.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f03baf-092e-52ca-8af6-6e97150e086c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-sosyal.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-sosyal.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65d2a33f-b6dd-5b0f-9ac3-490cb510dd01","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-sosyal.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-sosyal.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27979a2d-91f1-51e2-9858-2c79385c8169","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-tek-erisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-tek-erisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd20917-f5ec-50c2-afc4-9567a4d48023","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-tr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-tr.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d86472-1c04-5148-a6bc-ef7c8fa05a18","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-tr.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-tr.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e33935b-4404-5a8f-b8a4-d9f16e13748f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-turkey.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-turkey.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0ad3222-1ddc-53d7-8c6f-54c5f8d979f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-turkiye.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-turkiye.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c4da12-8d82-566a-8b78-9d372d33aab0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-turkiye.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-turkiye.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c8ef0f-fadc-5bb2-9ca2-5b7e7700af23","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-yardim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-yardim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe77a4b-1ce9-591e-a3fd-055bf8fd4ac4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet-yardim.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet-yardim.win']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a1faa3-f72d-53ed-9793-1bcc957c1f1b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet2026.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet2026.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb01054-6131-50e7-a78e-9c50abcad905","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bet2place.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bet2place.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa26124-c61e-5090-befb-36d1a92be779","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betcas.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcas.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feef408b-3ed9-59fd-b797-0d7b8b7ad8df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betcio-turk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betcio-turk.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d786c6a-c4e1-5841-b4ce-66f88f934f91","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--683b9376-7da4-5bae-b922-28039739466f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betflex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betflex.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219a17ab-50e5-5e65-aa74-9f7dde917cf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgaranti1330.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgaranti1330.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f010508f-6a3c-50ac-9720-6d9d85b925a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgaranti1453.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgaranti1453.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e32422a-ada1-5f32-81de-38e0bb77a9ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgaranti1454.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgaranti1454.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6253ff42-070a-583f-9a8a-77681cf857cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgit1055.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgit1055.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4438dff-dd0e-5fb8-9635-8cc0dd40223f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgit1328.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgit1328.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c87c496-7883-5c08-aec8-8d11a3adf55f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgitresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgitresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--665af4da-6f95-5c05-8e64-12122ec86863","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betgitresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betgitresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a0806e-8bd4-51bc-aa16-a5378e280bcf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betine-site.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betine-site.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d2a979-3b8f-5192-b75d-241062d6f118","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betist1943.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betist1943.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd66ebe6-2747-5e20-8d51-8cc966df8ef5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betmanigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betmanigiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9db1606-76d3-53d9-8a05-923c71f03745","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betmeme.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betmeme.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35719c2-b311-5a13-948e-fe4533c45eb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betmoar.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betmoar.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4bc2dd-1b84-5e0a-be11-30309960b08b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betmoneygirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betmoneygirisi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ec8bfb-96ab-57f4-9148-e5118878b432","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betnano2026turkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betnano2026turkey.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d129b448-ace5-5994-9a09-d9f6e2d20831","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betnanocu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betnanocu.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f26a62-c82c-5671-9d66-7c7f5189b5fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betnanoturkiyeadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betnanoturkiyeadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76467ea2-2533-56f1-98de-f8775f71e2f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betongamede.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betongamede.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63af4c8d-6200-502e-acbd-cbbc3100db40","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betonlinede.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betonlinede.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--294ea2b2-602c-5044-bc72-8f6cf14e5640","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betonred-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betonred-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1c8ab1-ba1a-57d5-a997-5cf6b803389c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betonredcasino7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betonredcasino7.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07df0052-bb3d-556d-b11c-40918f6c7ef6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betoras.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betoras.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8effe0c0-736d-5df8-97cf-f9aa68fcfab3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd9f442-56ef-50d5-b903-91b6d895e76b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betovis-viphemen.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betovis-viphemen.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94dc3111-7c0c-5753-b084-388097280f41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betparigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betparigiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--431e4ba1-b2bc-5e6c-8aae-38f92fada1e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpark1854.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpark1854.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4be7e74-4ee3-59a6-aa7f-2d1644b59444","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betparkresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betparkresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--186a1fa4-2954-55c9-a1cd-7f92c7e0e6e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betparkyeniadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betparkyeniadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43120396-1f62-5a52-9c9b-7996ecd540a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpas-guvenliadres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpas-guvenliadres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13881c64-2e09-5819-a9ed-d2c6d62932f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpas-resmiadres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpas-resmiadres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24169b1b-851d-5277-94b2-694b89d86866","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpas1650.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpas1650.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ade4e95-f177-5ff8-aa0a-6d2fde3d87bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpipogirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpipogirisi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b630e2b-3b20-58a7-b1c3-376150ea048f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betplay1124.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betplay1124.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dfe3d91-5f00-57fc-a500-905ae0626006","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betportal.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betportal.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a774b0-d9ec-5786-bc64-77d6b686ea44","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpuan1118.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpuan1118.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7928a60-6d43-5e3f-99fe-3eb96e9156cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpuan1128.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpuan1128.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4adf5fbd-8669-5ba2-b02a-0ed5be1d0e9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betpuan1135.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betpuan1135.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e750cbc9-12d2-51e5-86ba-603c7f7e02cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betrinouk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betrinouk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--859c45c9-6068-5705-9987-07fd76cb33bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betroadde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betroadde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f11d51a5-f129-5ca0-a6a0-20375bd6faca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-2026global.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-2026global.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2e7825-02b7-5b5c-8b86-9c910b452e8f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-2026resmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-2026resmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab7ce14-b2e2-5cbf-9600-c525d1e87899","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-724online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-724online.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdf2a27-5797-5457-b643-5bc7287c401b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-account.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23feeae2-dd64-51e5-8f99-6a7f19370cb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-adres10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-adres10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3eaadb4-eea6-5950-85ea-c3a31b0dc73b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-aktif10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-aktif10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf4e7ddf-e165-55a9-96a9-72502faf2fa3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-aktifgiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-aktifgiris26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2535e7-0732-5818-aaf4-89f1cfcc3c54","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-aktifgirisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-aktifgirisadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f1953e-80ec-5a79-b5c9-ffe70918607d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-aktifgirislervip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-aktifgirislervip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f801c232-ff25-5ca1-9de8-bbdd786c57ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anagiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anagiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc12bc74-1dbb-5d8e-ae02-5fca23627aef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-analizsitesi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-analizsitesi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d751a0-005e-5c4a-bba3-31cf30f8b31e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anasayfa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anasayfa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc05cac8-4435-5c30-b979-1b29ffaafed6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anlikgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anlikgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2acc4b-5da4-59cc-9794-faaacaed5657","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anlikgiris26.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anlikgiris26.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea22babb-e5e5-5348-8c29-09fc60fe8081","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anlikgirisadresi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anlikgirisadresi2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0022c12-dd5a-5454-a48a-28d2a0676d0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anliktekgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anliktekgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf18bb-c1bd-58e6-b0db-2f51de954239","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-anliktrgirisler26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-anliktrgirisler26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5fe4c1b-8062-5b0c-a71d-3ba145ec2f50","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-apigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-apigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fd73174-440e-5bae-8338-44f8309886cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-appmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-appmobile.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28ace29-cd94-5b97-9729-5a550afb663b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-bahisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-bahisadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3737ba-14cb-53f9-8c10-e645525b8992","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-bet10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-bet10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--861d7a63-3209-5000-907c-711f7a5deb44","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-betonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-betonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2653e025-6e0f-55d7-87f7-4651f89b3208","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-bets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-bets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22b709b6-c78f-505c-b8a6-770d86ef49c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-champions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-champions.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e5d7c5-fa32-56a2-a0a2-a0ce2142bb1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-connect.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edea7c2b-c515-5223-b7cc-81c62957ea80","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-dogrugiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-dogrugiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a72059e-a155-5b80-a211-84f7cdd22a4f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-dunyakupasi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-dunyakupasi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d5a4c1-3c3e-592f-b650-38bd82236a7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-eniyibahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-eniyibahis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f875dfd-d28c-51eb-9bd7-28e2a03fea9a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-gamelive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-gamelive.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f0c81e-948e-5da9-80c0-f2d177672dcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7909c2b6-bee3-5969-baf8-e28445ae5890","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-giris10019.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-giris10019.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--937d34a5-bdc7-5d6b-9a69-00bca278414e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girisadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girisadresi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c4393ea-fed9-536d-b7a4-fe4498584bbd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girisadresi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girisadresi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7148ad5-d079-5841-9c0e-0491216cf84d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girisadresinizguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girisadresinizguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4b6cc3-0671-53c8-82a6-916d014d6139","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girisblog.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girisblog.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f664bc98-be0d-5aea-a1b3-8db9eb6375f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-giristek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-giristek.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16e8075-972a-5552-8a1a-80fcf3d5dfe5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girisyap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girisyap.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24640ad-ac8a-5ed2-bc8c-ff20eadc1aa3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-girplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-girplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae626b8-cb72-5c61-af1d-99a6faf3d166","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-globalvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-globalvip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7615152b-1c25-539c-9cbf-608f996fcc57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-guncelgiris2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-guncelgiris2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8612134-547f-5dc3-ab61-9ddc39f97d5f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-guvenliplatform.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-guvenliplatform.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68fe8635-90e1-5b10-ac47-891817ed44c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-guzelkazanclar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-guzelkazanclar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce35fef-57f0-51eb-99e3-da87b9146f69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-hazirgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-hazirgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0034cc-f648-57d0-a2da-19f6a4919e12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-iosgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-iosgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8bdca2-0b41-589e-832b-682cc5945743","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-kayitgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-kayitgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d5a3c9d-87e0-5e6b-a2c1-bbbb62f8d240","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-kayitrehberi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-kayitrehberi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--333934a8-838b-5f11-a394-356219c00791","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-kingadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-kingadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33124d3-3f2d-5b2e-a571-08aa16fa9ccb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-kolayguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-kolayguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a42ce2f-9db9-50cc-b584-71d64b0ff793","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-linkadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-linkadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6759440-ce10-58b4-babe-e70de9d05860","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-livebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-livebet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef8501b7-f497-5811-a6c5-af49370a2431","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-livegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-livegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34d97c97-411f-566b-90de-54716bedde29","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-locklogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-locklogin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509821ec-7e69-527a-a25a-0c5a4475620a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-mobilgiris26.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-mobilgiris26.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc63dd3-7c7d-525b-952f-c80835fb60e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-moneytr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-moneytr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47d124a4-efd4-569d-899b-8799a545add8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-netadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-netadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fae99ce-1513-5a09-be07-c7d92310f98f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-onaygiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-onaygiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77556b06-7853-54ae-a617-71f9b7aecb86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-onlinegiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-onlinegiris2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe87440b-7879-53ee-ac11-c47ae52ef10a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-onlinegirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-onlinegirisi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f8fe408-3999-5960-b8f3-a1506080e208","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-orjgirisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-orjgirisadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6ac82a-ce75-513c-b170-d005824704b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-orjinaladresler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-orjinaladresler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb2a37c-7e43-5ec4-9da4-1e0c77f26359","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-orjinalgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-orjinalgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5639e9f7-dddf-5c4e-8737-97ddbdf67537","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-orjinalgirisim26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-orjinalgirisim26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d523bb5-66ee-58fb-9cc6-45c3d21a9dbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-orjplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-orjplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9fe11f7-a115-5491-b773-50926800cc63","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-oyna.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-oyna.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4fc21ac-1aa2-5014-a822-28897b41a690","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-premium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-premium.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfc7210d-4569-5162-88aa-619bb3f6bcde","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-provip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-provip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ee3879b-6d4f-5e03-918e-55a11c2f872e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-resmicasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-resmicasino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e154ffaa-45f5-5cc4-b927-532cfaedffc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-resmilergiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-resmilergiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28998b-a306-51e5-bff0-25d12a2f7da7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-sahagiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-sahagiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec2943e-0aa2-5345-b717-087bc98be4f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-seritekadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-seritekadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7383ffa3-68d2-5250-9ad7-a674c0dc4ef3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-sevilengiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-sevilengiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--273293b6-25b8-59ad-809a-4721ebbfeaab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-siteler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-siteler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56ebf44e-dbdb-53fb-a0e3-0a19770107d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-sonadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-sonadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27967a6f-dee4-5bcb-a476-52f119b3ca43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-starting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-starting.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6593d3f7-0941-59e9-b671-dbb226a88335","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-starvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-starvip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a931cc2c-4743-50fa-94ae-fda3f9a6a6c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-supergiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-supergiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2776cd00-7272-5599-b3d1-9470eca2ea19","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-tek2026giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-tek2026giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ea46ca-aaa5-51f3-ba74-3a52687137f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-tekgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-tekgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613c4854-eed2-542b-8695-88ff81d4f7df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-teklink2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-teklink2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3939107-9259-5d2e-8147-cd18757eaf73","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-tektrgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-tektrgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4aae09-20ac-5f73-970c-0dca61088c6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-topbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-topbahis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--010892dc-8acb-57a7-a3fb-d45156655c7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--921e7752-4d7f-5d7e-8479-004475feea28","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trgirisresmi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trgirisresmi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b42fcea-19f9-511c-b730-8ded5b70d11c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trmobilgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trmobilgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10217823-9585-5f7c-be7d-90415876a383","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trmobilgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trmobilgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a162d0-5b75-55bc-87d5-1c3d01e3ce3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trorjgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trorjgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770d0327-43c0-58c1-a64a-3246f3859d3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-trsongirisler26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-trsongirisler26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a77a9889-4ced-5089-a82a-0259931ca1a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-uluslararasi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-uluslararasi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe559bb-c8d1-5430-9501-2626058ada9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-uyegirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-uyegirisi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b960a8-d8a9-5e58-abde-9f0f17c8e8e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-viperisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-viperisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd374cf5-647e-5d8b-aace-66dc4237f17c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipgirisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipgirisadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfefae81-e28d-51a9-93e4-bd8db1b24036","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipgirisadresi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipgirisadresi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2a54fc9-0446-5b79-bdf2-c5ec27459590","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipgirisadresleriniz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipgirisadresleriniz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e8ab1d-d643-5f91-8d0f-e457f4cc8d9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipprogiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipprogiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f67495-9a86-5772-a533-c7b0c92bc568","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipresmigir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipresmigir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20665286-d08d-5d6c-8f3b-ceeed9daeaf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-vipsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-vipsite.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c4b898b-1d29-5fb6-8225-02d779e0053f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-webadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-webadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2aa046-5ce4-5181-8548-03f9d05bca0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-wingiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-wingiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0524f7ed-59b8-5cef-a3b8-9a954925cefb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-winkazanc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-winkazanc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d2eece-5a9d-5e32-9d27-332d3a3e07eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10-yenilink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10-yenilink.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f8d4ea9-9a57-5f32-a5dc-a23b38e8f1b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b289f17-71d0-5d0d-8768-89d2f03c091b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifgiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifgiris26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46e8d63f-8c57-5626-aff6-d5061d7770e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifgirisadres26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifgirisadres26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6668597f-76a6-58d3-b0ab-60d20da75e92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifgirisadresi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifgirisadresi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac4b18e-bd64-5eea-b7ce-043f18c66e14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktiflink.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktiflink.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--065afcc6-7329-579e-8afb-83ba489f8fad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifsonadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifsonadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c25a92e-b2e6-52e4-8c2a-99c7a04af1b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10aktifsongiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10aktifsongiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6547081d-af8b-500a-b78e-527bfc1e561d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10anlikadresgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10anlikadresgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7070615b-7526-5c1b-894c-31aae384591f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10anlikgirisler26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10anlikgirisler26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0153292d-8c13-5047-92dd-039e3c3bb160","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10anlikorjinal2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10anlikorjinal2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d3838e-37fe-5c26-9172-01a83e60c432","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10berrygiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10berrygiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f534ee-f044-5384-83fe-54016496fe1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10de.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee81b38-14ad-5a93-af2b-2a20fd44058c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10destekadresimiz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10destekadresimiz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01817717-55d8-520d-8180-931e1f03c96c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10digitalgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10digitalgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d7a2fe-303c-55d4-b94c-d564694ef032","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10directgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10directgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29cea0c9-fe2a-51bb-afbb-65a8ee929a51","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10fastgiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10fastgiris2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9315ac31-855b-5b77-a47e-bee75558c445","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10fastgirisler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10fastgirisler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5b727c7-1358-53e7-89d8-ac23989cf4b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10fasttgiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10fasttgiris26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf8aaed-f6b4-57f0-93c6-ac9bd3e8634e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisadresguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisadresguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8224173d-0e80-57b2-ac45-1edb099d0c19","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisadresleriguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisadresleriguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29959308-c34e-5140-8dc3-9c8e35066d43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisadreslerim26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisadreslerim26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8f973e-76dd-5f3a-a493-3ac40c8c5e81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisanlikorj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisanlikorj.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a1c196-8351-5827-b9f2-7c3f91224c80","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisgo26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisgo26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c827fa2-3c52-54aa-a214-1c2508c38f6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisleri2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisleri2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ccc9d1-1833-5c61-b194-d9dcc4e9c8e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girislinki2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girislinki2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a1dedb0-623c-5826-8826-4e000b1abb8b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10girisonlinego.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10girisonlinego.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9103b8ea-957f-5311-bf2d-8c93dcbac086","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10giristurkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10giristurkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac57060-31cb-51ba-9c2e-c6df3323e464","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10goldengiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10goldengiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd506e1e-9637-5377-8161-94c87613baa4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10gunceladres2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10gunceladres2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--596c549d-90aa-5651-9a45-13fcf5b5e337","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10guncelgirisadresi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10guncelgirisadresi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--219ea19f-6806-55c2-b0ad-7a369f7970df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10guncelgirislervip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10guncelgirislervip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6264049-6b19-52ab-8e21-db8084e3e489","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10guncelkazanc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10guncelkazanc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd51463-f974-5b15-8eae-e8bc1803f66d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10kazancgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10kazancgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--386d888c-7f30-502f-8f22-7c68ac91e3b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10newlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10newlogin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40046d23-e52b-593c-be09-b665bce72e79","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10online2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10online2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e8f1e7c-7daf-5037-a13a-1349e3a60ebb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10orj26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10orj26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1666af89-ab4b-572e-93cd-690941bb09a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10orjinal2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10orjinal2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--975957d9-d0fa-5620-89c9-4c68f5c6e234","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10orjinaladresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10orjinaladresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58c9473-4f9e-504b-ba7a-e4c9a5132996","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10oyunlargiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10oyunlargiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b60e31-1e66-5995-b990-f3f1017d169f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10resmiadres26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10resmiadres26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588786a2-ebf6-570d-8092-c40952b048a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10resmigunceladresgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10resmigunceladresgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7656dea1-201f-5efe-b123-54b24cfc2c17","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10resmitrgiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10resmitrgiris2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074ee7c5-dce2-5c0c-9d7f-a890e3053f0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10songirisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10songirisadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38553d5a-43d4-52bd-87c8-12b65bb856b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10sportsgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10sportsgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00209fb-027f-5b6a-a809-899a2e48d52e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10supergiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10supergiris2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--589d356b-6bcf-535b-a106-0c140cf892a3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10supergiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10supergiris26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05bb1423-6a22-58ea-881f-23ff0fc092d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10supervipgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10supervipgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05351344-2dae-54d5-995f-d354e9caceee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tekgirisadresi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tekgirisadresi2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfef3a54-95af-5bc7-9701-eca3707d8f0e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tekorjgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tekorjgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be9d71d1-e337-5339-8e54-8e1f97218850","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tektrgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tektrgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f26dfd-e7e4-5332-a6cf-30844f87de94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10temmuzgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10temmuzgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427d688f-f913-516b-a487-b5357f8c0cb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tradresgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tradresgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439c1368-46f5-5e19-a465-596d6e242afa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tradresguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tradresguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1753b9ba-35a8-5099-a588-3c86cced64bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tradresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tradresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4207b23-1415-5fe5-9872-87cbe4b4ed80","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10tradreslerim26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10tradreslerim26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93a878e-c17c-5619-b2a4-24f41ae55dc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc6932c-55fa-558a-9bf3-3f5ea09e9f0a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trgirisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trgirisadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86e73cb-0348-581b-a32b-2c84e1e0760a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trgirisadresi26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trgirisadresi26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b751f2-2b69-5598-9757-1bab05ff62e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trgirisanlik.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trgirisanlik.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b727d5a6-aeb2-577c-be44-9e6d7ddca2bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trgirisler26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trgirisler26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05412bc7-1601-553e-98e9-a1ab0bce0afd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f01213-d8d7-502f-b0a9-f7cb6f9eefba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10trresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10trresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--25557ef9-e566-59be-82b6-3942486c7332","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10turkiyegiris26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10turkiyegiris26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c6eaad-589d-596c-ac39-5186502ad84a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10vipadresler26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10vipadresler26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c7196d-e0f1-55f7-b469-7871b0369768","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10vipgirislerguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10vipgirislerguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f86b427e-d76b-5819-825e-0bcfb0b47b82","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bets10yeniturkiyeadresgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bets10yeniturkiyeadresgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b84ef5a-f1fc-5933-ae3b-6a4b4c65ded3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betsalvador788.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betsalvador788.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2271271-fc11-58de-a939-8331e0807657","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betsiogameuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betsiogameuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf7e2ac-64f0-5dd6-af38-831ca302df95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betsmove2177.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betsmove2177.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd044080-a9b5-5b2b-8c35-0d83539422f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betsolis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betsolis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14775bd7-e8e0-535d-951a-3a3a45d03277","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bettillt118.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bettillt118.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c15f341-d302-5059-8e91-9372e3e8f5e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bettiltturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bettiltturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--609f1215-7b26-54df-b9ce-a7e7755c73f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bettist1788.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bettist1788.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7afcaf4-669f-5de7-81ed-74f1126bdfba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betturkey5093.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betturkey5093.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b06f7d2-e957-5d94-bc2b-4c80d9d6b02f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betvisade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betvisade.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d692a7-2a2a-5260-b935-6eda359a4107","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betvoleerisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betvoleerisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c59fde75-0f1f-523c-9ac1-5fabf7476ee6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betwarriorde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betwarriorde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d8e8f7a-24b1-5d89-b48d-9cfe1b97c781","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betxeper902.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betxeper902.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--805d4ef6-9e19-5b5a-b94c-3e392cf5ac79","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betyap-tekgiris2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betyap-tekgiris2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a70a670-ed26-5a48-b3f3-d565f8247110","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betzino-casino2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betzino-casino2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b7c8682-3fda-516c-89c8-beffb84b6f92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betzino-casino4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betzino-casino4.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77b91e5-c319-5239-8a6c-ff4606e8fa06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: betzu-game.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'betzu-game.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a752bf60-799a-5058-afe1-351b42a924fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beucux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beucux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--879248bb-8d70-5cf6-aba1-17752d3952cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: beyondorcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'beyondorcs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fb50b8-8a7f-5c1d-9e9e-bacd9354a84f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bezowin159.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bezowin159.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b37f4b7-8439-5f64-a987-b3fc3364f04a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bibince.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bibince.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaae13d4-9160-5cc3-baf0-9b521a67d924","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bidrila.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bidrila.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a29bdce6-7af3-5e10-ae8a-2b5f9fdfb009","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-authenticate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-authenticate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a7f6fc-f49b-5125-b2b4-efe032483942","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-hq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-hq.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6498b9-3502-55c0-abdb-2a53bd203275","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-invite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-invite.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b43b12-07ab-5068-8aef-a2e97b600f53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-op.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-op.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b30d68b-1e85-505e-97f7-635788a70d9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-qw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-qw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b2075d5-61bb-5c95-9fc0-8cb0d7ae7d20","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-ud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-ud.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef1106e5-4f9e-5e81-a868-3b8ad07af893","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-yt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-yt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e6d5e88-b869-5a2b-9d28-6dcbe115fb03","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binance-zo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binance-zo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb76e1f-2f3c-5174-ad86-68e911ea7884","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bingetrix.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bingetrix.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fb32931-150c-5188-9c28-89fda0096c8d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: binkwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'binkwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--905373e7-6e94-544d-ab9f-a6f896a3c8c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bit-bank.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bit-bank.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40557bc1-babd-5970-a58e-343a185a5dd3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bitbotpanel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bitbotpanel.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bdcbf5d-9014-5273-8653-64236db74af0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bitmixers.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bitmixers.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52078cf9-8bdc-5e64-bb42-708f7f728ad8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bkrvmdtcm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bkrvmdtcm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69569d8-e14c-5eeb-bd1a-29950edb3acb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blackrockcapitalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blackrockcapitalbank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f332670b-7888-5028-a904-b488a985da34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blacksprutdarknet1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blacksprutdarknet1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0cb507c-3a05-55a7-9675-4d2388a6408c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blacksprutsite1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blacksprutsite1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8078560f-b76e-551a-a80d-9d7e1449ef39","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blaze-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blaze-swap.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55bbb138-9f24-5ec0-b57a-654442fb92bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blaze-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blaze-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--774a819b-5254-5397-944f-d29e170eb358","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blazeswaps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blazeswaps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68c9272-afdc-5318-ae88-bc640efaff2c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: blindluck-casino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'blindluck-casino.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--393d2e00-f3ae-5493-9cf2-193d1c9edffe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bluetidefinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bluetidefinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebba805c-e410-5824-b4a4-4e82a204c164","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmf-gv-steuer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmf-gv-steuer.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f53d70b-b35b-5485-8d76-c7b64d5ead13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmo-validate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmo-validate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f260355d-b640-5cb5-8031-836aa7073194","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmo1verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmo1verification.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fc4f08-b82f-57cf-b797-e595837b7554","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmo1verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmo1verify.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff40873-f94e-5e38-a705-55701fad60cd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmohelpnow-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmohelpnow-portal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6793f9e4-e5ef-5683-86fe-4c991e25eeba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bmosupportpage.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bmosupportpage.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--077bef46-1701-5572-bb5e-1c3ec2034f49","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boacux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boacux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16490db2-cb98-54f6-aee5-6c6bd1bb8c9c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boafox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boafox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c90aa8-4531-5ce5-bbe5-af935010de99","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boamox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boamox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdcaef4e-c683-5dac-8245-f85bf98bce2f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bodybuilding-extreme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bodybuilding-extreme.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b1c2fdc-73be-5d1a-92ee-9e2f0ec26226","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boegex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boegex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58894b7-1b91-5f0b-8bdd-59d0d61c7a41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boegux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boegux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--554bcc53-4f51-55fc-9f6e-40451068db4b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bofa-authenticate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bofa-authenticate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b20bef3-6dec-5a7d-9392-3501ef0866a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boktrustfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boktrustfinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c184f704-c7d1-5dae-89c8-c4a3991df9b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bom-giris.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bom-giris.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc86d7d-3283-571d-b89e-1df7280642f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bom-site.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bom-site.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f5ab8a-f21f-5220-a770-dbd2feb4299c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bom-tr.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bom-tr.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c66a1a-c7b4-5e15-a013-eff3acf6dd65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bom-tr.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bom-tr.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5630b6a-759b-5780-ac6c-c4d23e9145cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bomavax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bomavax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2874f0-8847-580f-a135-a2a3a7f97a12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bomawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bomawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a6c540-b840-5df6-b83e-1ae37008b42d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bonweu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bonweu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea68b25a-3034-5445-b450-2a7cefed63f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bonzofinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bonzofinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18aeb71f-4dd8-53c1-9895-1aa6343e0543","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bonzova.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bonzova.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2bb6d8-7754-5382-b88f-81bdf4b33689","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: booking-doorsi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'booking-doorsi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8eca013-ee6d-526a-bfcf-cabe325ce983","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bookkooks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bookkooks.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb4d92b7-e703-515a-a8d5-91fca0af334b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boostcapexxr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boostcapexxr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1caa2db-f0e2-547d-843c-e102b3be09ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boostdiamoxai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boostdiamoxai.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb556c7-801f-5bb3-b363-daff82588d87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boostiplexfin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boostiplexfin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a77632-3313-52ce-8b75-ee1446caf191","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: boostlexipro2u.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'boostlexipro2u.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43b00e-cc49-57b9-ac8b-03ec3654f266","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bop-main.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bop-main.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2bc26d-f295-5f39-bd2b-8ae85cc01e3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bop-videos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bop-videos.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7578c66a-b9a4-5a24-a3b1-8d940d67f636","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bopaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bopaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--188011c0-3f5d-5928-87a1-ad6d73bb444d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: borswin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'borswin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7432916a-bc42-5aaf-bd4a-f3c89cfe43e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bosawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bosawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb22a6b1-5fc7-5c2c-8cab-56c007fd391b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bot-protect.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bot-protect.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d29d766-0730-5778-be71-181010d10dda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: botawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'botawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff6a365-3b55-5006-98db-68d16223c637","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bd099a-f578-5e80-9cd4-f03945efe61a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bozewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bozewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b6294c-b5ab-55c3-8429-5d2e1943e227","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: br4betde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'br4betde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a3ba48-729b-54cc-aff2-5859ff07d84c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: breach2bz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'breach2bz.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5ad58a-c8ec-586e-8964-b9426c89bafe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: breaker.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'breaker.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03136705-5f70-52e1-b380-0550b7e098b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: broxusbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'broxusbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--314fff24-e4ad-5cd8-a62a-ba08cb41553d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bsb007-aus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bsb007-aus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e852e391-3dfa-5aea-892c-fe955c77a32c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bt-mob.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bt-mob.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79fbb0d5-4d7f-534a-a812-9ee157717b9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: btc-x2b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'btc-x2b.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d37098f-2ba9-5710-a9ff-0978dc5d39a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: btgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'btgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32402f4-fcbd-5bb7-87c0-a6c5f2021f5d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: btmobandroid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'btmobandroid.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b87ffb4c-8abd-5f32-b04d-f383b3b67757","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buafox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buafox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c05cc4-3021-55e9-9c2c-c576f362ee8f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffallowildswlng.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffallowildswlng.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4bc54d-1d36-5337-a7c7-f0f1fe3e5002","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffallowildswlngs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffallowildswlngs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d05c2e4-84ed-548c-8fdd-512826d7bb80","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffallowilldswing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffallowilldswing.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77c2f468-b6a7-5e5b-a4b0-ae29055b9016","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffallowwildswings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffallowwildswings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae51e9b2-acb1-5793-8d63-2c49686b2ba2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffalowildswingss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffalowildswingss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a4b34fa-d925-51e4-8cad-da2d862f5c83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffalowildvings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffalowildvings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91fdc6cf-9225-559e-9990-2958572201c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buffalowildwinggs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buffalowildwinggs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c575b03-5833-5a1b-834a-7d3268f7a195","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bukewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bukewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff74d9c9-a9ec-5fce-8cd5-7c5092ed268a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: burgerkg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'burgerkg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--844e42b3-5d3e-5713-9a0d-98755ab5e496","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: business-easyweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'business-easyweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78943581-dfa4-5702-a23f-f9274b39b241","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: business-meta.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'business-meta.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3a7bd8-ba04-5fac-b767-dfcefd47615e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: busrecharge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'busrecharge.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136d933-1e22-5b3a-8f66-f7ca2cede8b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buuffallowildswings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buuffallowildswings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c0d1c4-8894-5271-807b-aac9a794b9ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buy-choice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buy-choice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e2469c-b5d5-58c2-9023-1d2dc4a48bdb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyarmodafinil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyarmodafinil.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c36d4e-9423-587e-b889-ab3713803a69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyazithromycinzithromax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyazithromycinzithromax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d5314d2-7ebb-50aa-bb05-6ab0f091c0b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buycertificatesonline.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buycertificatesonline.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e046e14-3c79-5e03-9ec1-eda33424cc50","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buycialisonlinefast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buycialisonlinefast.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e1700df-82e2-5432-a40f-5b13462cee69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyclonecards.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyclonecards.bond']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--279788fe-5fc7-50a6-ad17-66fa9f23e906","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buycounterfietnotesonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buycounterfietnotesonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b47614-3b4b-5c10-9538-729a5c41cd32","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buydriverlicensesonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buydriverlicensesonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acee81ea-91b5-51af-aa8f-bb3a327b401b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyedtabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyedtabs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01c11e5-a1be-5bb7-b642-31b5715ea4b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyfakenotesonline.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyfakenotesonline.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a49f871-8b2a-523d-8183-f0ef4c78c00f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buygenerics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buygenerics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5b5354-3efe-56b6-abbd-3ffb6964891e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buymodafinilonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buymodafinilonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2036fa-6ba1-5841-9a59-07e89d08c072","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyzopicloneonline4uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyzopicloneonline4uk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0fb0a46-344c-5524-93a6-2dd83afd51df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyzopicloneonlineuk.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyzopicloneonlineuk.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7bf8f4b-ba3a-5976-b9fe-68451ba726d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buyzopicloneuk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buyzopicloneuk.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9136ad25-c9c9-5d47-b641-d8c643fe47df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buzawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buzawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--592e6618-8220-53f3-8b5e-4e23c5b03b5b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: buzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'buzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b75412-0849-50b7-a1fb-840eb4b2ee92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bwgwewdfe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bwgwewdfe.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86327b37-8cab-538a-91de-907fdd8f5d05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bwin2026.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bwin2026.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b0cade-62e1-5552-aa6c-c33e739f6293","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bycasino-orjinal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bycasino-orjinal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f7a0cd-c3e6-58f4-b8fd-9e1bf1231177","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bycasino597.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bycasino597.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e8d3aa8-74cb-5228-8a96-4738c03e5302","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bycasinotrguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bycasinotrguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adbbd88c-7d02-5a9a-bdb3-16108455e560","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: byconticasino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'byconticasino.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f28e201e-519e-59ce-8830-7366e64b5d0f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: bywoa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'bywoa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e7744eb-6946-58ce-b0c6-ff622cf56163","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: c1zh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'c1zh.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64bb3b6d-9023-5067-aa77-fc14147cdd89","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caagex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caagex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0338f6ac-5ee9-57bf-a533-f1a1442105b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caemux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caemux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517c50d6-61a6-59a2-b90b-eb9bc1b70a3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caesar-ventures-gmbh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caesar-ventures-gmbh.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0244c0b-0af4-5be5-ab0c-118fe51255c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cafedexcorrection21.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cafedexcorrection21.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7252d-4c83-5db7-b167-11cb898e8697","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cake-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cake-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b5f9e76-929f-543c-8d80-f075b35867a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: call96-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'call96-au.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4944dac-7646-54e9-88c7-123edf6c1c0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: calupohde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'calupohde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f105c7c6-66a1-559f-aa1a-43ebd1392527","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: campset.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'campset.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3f9f9-9a37-57a1-b7ca-48a3c941fe0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: camsvn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'camsvn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7e6609-6280-58fe-bf6e-61f75667b85b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: camvibe.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'camvibe.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d93a5c98-3ab3-5fbb-9781-936bcc8df0d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: can1breadaction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'can1breadaction.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43156ab9-2bb9-5e2d-a52d-9a4ebaf6e468","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canada-post11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canada-post11.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad779dc-0920-5d01-8ea2-56e81afbf13e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canadapost-now.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canadapost-now.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f76272-f89c-56c9-b496-a2c31a7f3a7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canadian24hrpharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canadian24hrpharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f86acac-afcd-5f3f-95c2-7755c039162c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canbreadsettlement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canbreadsettlement.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5f9bcb-6540-5f96-b280-771933cd056e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canbreadsettlement1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canbreadsettlement1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a44fdcaf-2271-516a-9a0e-f0fbbece90a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: canda-authrty000sorc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'canda-authrty000sorc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87473390-a848-58c6-90ad-9312d05a423e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: candy96-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'candy96-australia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60743406-e32c-5106-931f-cf27a756275b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caopux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caopux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd974821-edbc-5cda-b081-dc5604e2b548","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caozax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caozax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a441cc24-235b-5c6a-abf5-9f9dbd2dc17e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: carbonereservationnyc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'carbonereservationnyc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e807eff2-0973-5221-91c3-c175c6955f55","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: case-48282-coinspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'case-48282-coinspot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4244728-be2d-5954-b322-e3d06b7967dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: case58728-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'case58728-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8bcc723-4e5a-5ce3-84fa-8f075a4d5111","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: case83924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'case83924-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0135d098-6226-5c24-be6f-5022f49d6600","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caser.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caser.best']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96aafe4-feb7-5f92-86a9-7068af88fd4a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caser1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caser1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd5a3b-69f3-572f-a338-ad254c1054d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casfox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casfox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36340c45-41d1-5ad5-8420-fd9c54bcd5c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casgex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casgex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d35458b-a3d5-50a7-aa54-11eabefdcd8f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cash-casino.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cash-casino.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aecc35aa-99b5-5779-8b31-a81a31d8fb6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cash-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cash-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0019f80d-7f63-5097-9614-f1faf600e6c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-2026turkey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-2026turkey.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fe3920-c31a-5e0e-b3fd-9fc462a09285","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-2026turkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-2026turkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4602677b-38cd-5831-afc1-28e57988cfbd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-2o26guncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-2o26guncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e77482c-b264-5c94-9e24-3458da4acdb5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f44323-366f-5108-8672-8954b68c3e41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-mobil.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-mobil.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d98ef314-2062-51f6-b068-cce13777925c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-oyunlar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-oyunlar.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01c302c-4370-538b-ad36-15538e01645c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibom-vipguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibom-vipguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf11d26-a0e7-5d4b-97e9-287ef325a985","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibomtrgirisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibomtrgirisadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ebe035-6810-5185-a3cc-3f7b0f11fbc4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casibomturkiyeresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casibomturkiyeresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8254524d-36eb-5636-af6c-aa34cf6da71a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casifex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casifex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c959a602-2fa3-5de8-ad1c-345a163d0ff1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casino-azur-france.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casino-azur-france.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7b6c33-a0ab-531b-a700-2312f5f91c1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casino-betlive1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casino-betlive1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6868e79-3804-5467-a7fb-356088ecf974","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casino-betlive2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casino-betlive2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4d5d3d-c6f2-52aa-8691-baf14a3e8982","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casino-betzino-slot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casino-betzino-slot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2918e38-1220-5fcf-8fde-1c27e1c89455","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casino-giris10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casino-giris10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0e02f9-f37e-5828-b416-e03b3783c2f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinoclassicwin-ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinoclassicwin-ca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1035a160-3c6d-5f3b-9685-70c0b6acffe7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinogiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinogiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--667ac646-5e8c-5ac4-bf6c-62fd59f6a2af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinometropol2107.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinometropol2107.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a4691b-206e-5430-8f7d-65ee5cda4a7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinomuskspace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinomuskspace.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--156f5a85-7c9e-520f-8545-37f6804c4c80","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinoomsen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinoomsen.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffa8aa4-a0d7-5946-95dc-1a019b6e77cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinorooyalguncelgirisin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinorooyalguncelgirisin.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9e0073-e236-542a-a166-b8e106619cde","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casinos-plays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casinos-plays.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3048ab62-2a3e-520b-a358-7ef64ec54321","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casivero.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casivero.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a73b60f-7266-5533-bfb5-f27817d8a8ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casivision.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casivision.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5e75644-da65-5297-9821-29fe197a7190","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: casorax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'casorax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910043a9-6e15-5d02-a525-064bf1b4d567","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: castorama-promo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'castorama-promo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8de774-0f83-5182-801b-638599de2dd4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: caszox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'caszox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59efea5-8aff-5da4-bdb2-10b960dea931","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cazeus-casino-france.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cazeus-casino-france.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--215769cf-39b1-55a8-98a7-972077cbb823","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cazeus-casino2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cazeus-casino2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a62a1b-4282-50a3-b67f-1c732802b004","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cbetde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cbetde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cff16c7-777d-5e86-bbbe-d98145280a71","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cbetplayuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cbetplayuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0587cf41-102a-5159-b627-3124b9ca57f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cbr3srvcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cbr3srvcs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa3b3880-eebf-5409-be86-bbb1a53f2b14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdagncrevn30.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdagncrevn30.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3270f3bd-de69-5be0-9870-5b2e9a131aa5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdnrevenuagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdnrevenuagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9625d2f5-b290-543c-8b19-de86ea83da8c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdnrevnuagnc0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdnrevnuagnc0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb082da-b07c-5f77-9a74-4e5f2e61439f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnagnc0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnagnc0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dd54ee-7adf-5ec4-b4cb-ab8f48d4e3ce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnagnd2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnagnd2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f07f9ad-3c10-5b84-9479-448d73a7e3f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagn03.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagn03.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ba994e-1d1f-5584-91be-6eee7ac2a8b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagn0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagn0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a6dd951-5097-5c4f-94e4-90ff9224d7be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagnc0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagnc0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55cf0d8-a707-589b-bc0b-f6146ea23866","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagnc2605.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagnc2605.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37790af6-186d-579b-9450-49b11278fc66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagncjun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagncjun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96734df-c1fe-5a67-b3ee-52e9bedfc2b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagnt2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagnt2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9022dc6-a318-5742-bc7f-6f14fb756aee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrevnuagntc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrevnuagntc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e57a807-7f9d-5cf1-a52f-b56806d1eb06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrvnuagnct2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrvnuagnct2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf21e4c-7659-5d0c-8e3d-3b944b397717","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cdrvnueagnctjun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cdrvnueagnctjun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7749d6-2a20-5d74-92a8-add3b7ee628b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cebowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cebowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bcc19a-3562-58eb-89e2-d88e037f0e1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: celinedion-billets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'celinedion-billets.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4695c2-030c-55cc-b03d-f7df61bde363","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: celtabet1172.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'celtabet1172.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c59ec5ec-dafd-5bb1-af66-ce07fa24cc3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cenforce-onlineuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cenforce-onlineuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b113e8ca-0808-5b45-9315-0ed14b124c84","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cestwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cestwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b7391b-8a86-5a95-900c-3ce3a23d7a9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ceudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ceudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27d2a270-960d-562a-bc72-ef3a160ee8a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cgeb-benefitcra01.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cgeb-benefitcra01.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d235d4b0-edc1-5330-9b7a-7b8abbc62514","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: charater-ai-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'charater-ai-review.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--896e8194-6bd8-589e-830b-676dd0804a3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: charlotte-car.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'charlotte-car.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08938e3e-c952-5af1-865d-8e08f62fafb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: charwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'charwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd95360-392d-597b-9ddf-2d09be2928c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cheapdoxycycline.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cheapdoxycycline.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5721a5-2a63-51a4-9dd1-9369374d14a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cheapest-buy-doxycycline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cheapest-buy-doxycycline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68f3a309-35d6-55bf-9580-9c9be51e4825","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cheapyet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cheapyet.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6967880-8a49-58db-ba9f-55022ec66898","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: checkerfinanc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'checkerfinanc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--638da8f3-6b17-578d-b97c-79fc65fe0024","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: checkerfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'checkerfinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e00efd-9fa4-5cdb-933f-0b2bac11275d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: chehkvpn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'chehkvpn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0def93dd-ef56-508e-9cf4-4714f80a80c4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: chicken-road-deutschland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'chicken-road-deutschland.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48741115-d9d2-5c64-bb27-c30cd6706b2f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: chinesepeptidecompany.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'chinesepeptidecompany.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62984259-2e0e-5d07-aa5e-af1e8f5f3a04","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: chromim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'chromim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67dfe068-d072-5c5a-932a-df7eefebd04e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cialisbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cialisbit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed0596c-cd54-569e-a082-8b981882e613","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cialisbitcoins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cialisbitcoins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b325ae71-a0c0-5d9d-86d6-b2602b50672c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-disputes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-disputes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b91352d2-a2b2-57a7-ab8e-54b55e3626ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-onlinesetupdevice1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-onlinesetupdevice1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3038bc6-5aaa-5e08-8a22-280f1de0cb0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-portalsecurity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-portalsecurity.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3e4f43-e259-5d10-897b-146eb3cedfc0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-resetonline.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-resetonline.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b961acce-5eb0-5733-bc1f-774c4e296ea5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-secure-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-secure-web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4696d4-5b34-5b2d-a621-439df040484f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-security-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-security-web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44cfa490-bb00-546c-a2f5-40f6da730419","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-securityweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-securityweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db773f0c-2b6b-5fba-a5f8-bfbf307a4c05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-setallyouralerts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-setallyouralerts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6007288-a4a8-553e-a6d9-1beae9ec27ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc-setmyalertsnow1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc-setmyalertsnow1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--180df223-25c9-561e-851c-97ab17a067ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibc1-clientportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibc1-clientportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cd903f-3506-5490-bb03-d3e54f56cfd4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibcadminvalidation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibcadminvalidation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78e9905-8ae0-5249-bd2a-2866dceb42a3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibcagentsetup-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibcagentsetup-live.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--047af2a4-9554-54a8-b9b2-6e4f56755816","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibcdevicevalidation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibcdevicevalidation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13bf58f5-2c68-579a-8e26-84ac6e9343a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibcsecuredadmin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibcsecuredadmin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82caa9ba-93fb-5211-9f42-b13067333da3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cibcsetup-agentnow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cibcsetup-agentnow.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7dd631-674d-5f10-94dc-35916ffb397f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cinevice.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cinevice.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d635101-f270-5a86-95d1-eca4cb4c1f53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: citycenteronlinear.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'citycenteronlinear.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f17bc075-a7f9-52d9-bca9-489d5e8114ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cladehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cladehub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c631024-d6fd-5d94-88b0-b37aae555bba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: claim-benefits-now-mycra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'claim-benefits-now-mycra.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--970863bc-ae26-5d82-875a-abf4a54240d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: claim-cgeb-ab.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'claim-cgeb-ab.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--717502fa-1101-57c4-b21a-2e33fba99d47","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: claimscotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'claimscotiabank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf78eb3-590c-57c2-a7ad-55288e2007fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: classifieds-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'classifieds-hub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22405035-d7ee-590a-8aea-8eaee7605197","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clckbus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clckbus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7beab78-c73f-5aeb-bfb2-c01a4b17cffd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cleangamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cleangamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bdffae3-d6f3-5d63-a6b0-919583eb0677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clearorder286262.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clearorder286262.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5fd88b-7ef6-5ab5-bd55-7b94c39897a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clearpool-finance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clearpool-finance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4159629-1fb4-53f2-8162-74661b463085","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clearspark28.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clearspark28.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dda9717-d399-584b-810b-bb4a1230a2bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clickbusp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clickbusp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab8e878-ff46-58c7-9e51-d1599577bbad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clickbusr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clickbusr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9755b38b-ea8a-56e7-af0d-34c71b95db42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clickcbus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clickcbus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a170f04-eb2f-5349-be23-09bd264e4a14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: client-9ts3p5c7z8ts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'client-9ts3p5c7z8ts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bacef6e-985a-572b-806b-82d1656a693f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: client-zxb93nm870opqtz7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'client-zxb93nm870opqtz7.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ee9150-1ab2-5929-8500-142455a2a627","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clientonlineapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clientonlineapp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f950cc3e-99c0-5fae-875a-a8956f73d0cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clientsupport-authportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clientsupport-authportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a44662-4c74-5e0f-a949-bb6090b734d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: climanomade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'climanomade.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d001d6af-5197-5508-969d-c42355c3282f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clipfiofficial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clipfiofficial.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa25fd4a-bdbb-501d-b994-559240eb4863","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cllicksbus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cllicksbus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3a6a74-efe0-58e3-82c9-95f3cc6faa42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: closbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'closbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9389c1-172f-57f0-8992-47482a74071c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cloudcheckerconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cloudcheckerconnect.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f59dce1-bd62-5d75-9bbc-fb2f3a311632","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cloverpot.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cloverpot.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93de8d07-3bf5-54e9-8e77-3de4d209b5f6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cloversbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cloversbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a71413b4-ea02-5d3a-9bbd-05d1e87891b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clovtex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clovtex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08b6ac3-1c96-56c5-90e3-d3c6478034f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: clubmarts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'clubmarts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3489d6f-240a-59a8-83bf-a09d8c02ff1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coahox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coahox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8d479d-eb36-5c10-92f2-bb07ae730d2c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coahux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coahux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--391aa03d-fc3e-5fba-9d8d-a7374c49725a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coapax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coapax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28621429-86ca-5dc6-a9fe-35d6f44850eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coavox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coavox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--853fec5a-7d7d-58fc-8de0-5c715a02f68c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coawox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coawox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d334e21-acee-597a-a699-b5730822f986","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cobera.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cobera.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01dfd3c4-4606-5112-9dbc-aa9b569f59ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cobracasinowinca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cobracasinowinca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3625f62-27d7-5226-b1bd-d1c9f382e58e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coderestar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coderestar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa691ca-6e3e-5b41-a8d5-6571dbab35f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cofixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cofixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9cdfe3-2d61-5eca-b685-089ee2489439","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cogenerics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cogenerics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87750808-93f9-5b87-96a1-0eb8b858499b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coin-casin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coin-casin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd971cf-dc1a-530d-bd6a-f3580ead78d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coin-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coin-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c522600-4295-5f12-98af-90bc6a33318a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coin-volcano-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coin-volcano-fr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e30b2d6-2b84-5a7a-8e55-f5031f116aab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinbar-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinbar-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b932cec-8345-5c0e-86dd-039ff279b8fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinbar-kazanvip.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinbar-kazanvip.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b15e1a7-6d7a-5adf-9a8f-c574cedbb8dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinbase-card.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinbase-card.vip']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69e3010-5833-5808-8451-3a29e1ef6ab2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinbstaking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinbstaking.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b340337e-8783-51cd-ba8e-2123285db75d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinmino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinmino.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b64f29b4-4e01-5b98-b45c-5d0d84362796","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinomizemix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinomizemix.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--657c0c39-8530-59ac-bb43-d677eee037cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: coinvolcanofr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'coinvolcanofr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd0f79e-c3cf-5ded-90b0-cf651fb8fe76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: colldstonecreame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'colldstonecreame.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7566db41-05fc-57be-bb71-aa8f3b254249","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: com-holiganbetorg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'com-holiganbetorg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bf40eff-a041-52cf-98b0-3562a762edcd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: comicstrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'comicstrust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f611b1f3-d40e-5145-b925-b2c5ac179ee5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: communitybanknh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'communitybanknh.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--575b880a-e2d6-5b8b-b5ba-68fdeab5ee96","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: comp-swap.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'comp-swap.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1fcec5e-550a-5b29-828f-5ebe5a268fc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: confirm-extranet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'confirm-extranet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1deb589-e2ab-57c0-b08b-bb5bee89442d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: confirms-booking01518.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'confirms-booking01518.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc5bbc6-9a1e-5614-9d80-11a08d52f224","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: confirms-booking30518.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'confirms-booking30518.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d30b26-65cb-528c-9e71-f812d1cee11a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: connectdplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'connectdplus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beae57b8-d149-5e86-8f58-62b959f86770","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: connected-api.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'connected-api.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3879ba0c-4616-52f8-8e30-6022b4f816bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: connexionsecuriseeqc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'connexionsecuriseeqc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa05112-f48b-5d52-a827-cf7b3ffd01ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cooacool.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cooacool.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bd7e85-a395-5e93-bc77-abff640460da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: copilot6view.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'copilot6view.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c96e6eb-1b6c-5ea7-8cf3-b677b5783680","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: copyratio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'copyratio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e21d1b-3d59-584f-85a7-a8c07fa24b87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: corevhost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'corevhost.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f4f9e1-18f8-559f-9b85-5ec39c6ac01c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: costcoinfos5fa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'costcoinfos5fa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47363fcd-bf25-5cb4-8075-92784b1e9a8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: couhex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'couhex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dbbd973-793a-5b2a-bda3-48abb9202d0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cowswaps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cowswaps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d49ffc-b8dc-54e2-a3ae-5855bdd0fa22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cra2pmt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cra2pmt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1355f8d-9a25-5bbe-bf59-cb519cad62fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cresevensd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cresevensd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4267b7c-5f6c-53f6-a459-e898083d46d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crownedluck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crownedluck.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a8ddef-556c-56f8-aca7-000f6d3955d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crustbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crustbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67fe7b7-606e-55f9-96f1-cb3a8632631f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crustwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crustwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0a3d45d-8e72-5888-82bd-4128c4b9550c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crypt-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crypt-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc69c1c-16fe-5545-8d41-bcdf8562e1b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crypt-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crypt-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce977b0-184f-5eac-9d3f-3d2f3fad9f85","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cryptnewchronicle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cryptnewchronicle.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f68b77d-6416-554c-9f25-e760c495a084","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crypto-beacon.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crypto-beacon.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c72af2-a0b5-5489-8903-4a92de970763","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cryptogrand.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cryptogrand.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab104fa-61ef-5483-9ebe-abe2928fe617","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cryptostopp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cryptostopp.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3861195c-3199-575b-a1b2-aa5a8e4a863b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: crystalspin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'crystalspin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--510297f9-7464-56fc-abaa-76110858f03e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: csgo-skins.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'csgo-skins.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08467377-8458-50eb-810b-de972dc9c493","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cuadax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cuadax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9f6d1dc-8090-53a1-ae3e-c6a49d4bb03e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cuahax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cuahax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4800ed37-1af9-5edf-a925-9be21a009b69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cuk281ceb46.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cuk281ceb46.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ab07785-24f8-59df-bddf-19644c3d9a39","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: curepharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'curepharmacy.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5c6e3b-aaed-587e-87c8-87dd6f9aa5f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: custom-registry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'custom-registry.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f41cfdc6-c6de-5cd5-a669-087854ede0be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cyberjanitor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cyberjanitor.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30c85fb-a0aa-522d-8202-afa56fa1e27b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cybervertex38.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cybervertex38.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--232e6f9f-6db6-5b17-ae6c-5a6488f5a553","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: cyrowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'cyrowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddf6399-116b-5b57-87ae-2f63f0c4dd33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dabargold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dabargold.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bbafa4a-442c-520c-8a65-fd418a6d01a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dailywinx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dailywinx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a176653-0eec-599c-8931-bf09d7d76dd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: daogex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'daogex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--254b9b51-2b1b-53db-8f6c-174d811a4525","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: darowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'darowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4c4f6f-ce98-58e0-932b-2fb11965634f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dash-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dash-trust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a12fe6a6-0eef-521e-b7bf-f4035d92a8a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dash-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dash-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15f6371-9ff2-5ff1-84bd-74ccb065d2f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dash-tw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dash-tw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3426fb3-9c99-5979-a650-2aecdb77371c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dash-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dash-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fe956ea-c6cb-55b5-bb4c-1c7e3f729cef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dashiplex100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dashiplex100.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc8ce20-07b6-5cdd-b625-e007b3fc96f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dashiplexxp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dashiplexxp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ec5e5d-ec2d-554b-9000-a745a24b353d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dashlasixhex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dashlasixhex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a798ff88-2e3f-537a-91e6-d49950fac343","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dashlexiproneo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dashlexiproneo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec3215d-f772-5891-8fb2-2587bf28bdaa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbdda857-8f67-5f7f-b0e4-c482a1bb67f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: datacellux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'datacellux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35305ac-2805-5f3a-ae4f-94048f5ebd0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-appsuite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-appsuite.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e706670d-25c6-570c-a782-54a5bfa9b445","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-client.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-client.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--781407fc-d17e-59bb-9a1a-7a70a741ae72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-kundencenter.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-kundencenter.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11649407-a8eb-5947-98ec-708708479d3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-kundenservice.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-kundenservice.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bb61000-18bd-5a1b-998e-1c44cb017531","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-mein.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-mein.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--668e8c3e-0ab2-5006-bc06-0156602a4a3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-mein.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-mein.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13f76463-befd-54bc-a73b-5b2c4b762f53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-oc.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-oc.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf577781-d2d8-51ee-a17b-04dded898c47","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-rechung.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-rechung.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd49f8b5-7d0b-5fbc-b0af-02bbf4aab748","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: de-rechung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'de-rechung.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--447d17da-8b92-5512-8568-872a1f3d0982","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deadphish.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deadphish.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cbfa09c-f5fb-5aeb-b512-35bc5e308fef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: decorcoiors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'decorcoiors.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37c820a1-0c58-52e0-978a-657e45591933","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deep-harborio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deep-harborio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3cd222-ef43-5c1f-b4ee-84c211cd6737","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deezbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deezbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52edbff3-d74a-5541-a2bd-618908216076","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deezwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deezwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc49c1b-e1b1-5dc0-af73-dc42cb7bddb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: defend-triust.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'defend-triust.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d042231-42eb-55f8-b515-250fd032fa87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: defend-wf.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'defend-wf.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ec2145-62d2-5243-a570-761b09f0f2e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deltapredict.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deltapredict.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b2550b-f7d8-542f-a9c5-407968e8de9d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deneme-bonuslari2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deneme-bonuslari2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb18289-0cb4-5fda-8b7b-f0ae87d68cb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deneme-bonusual.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deneme-bonusual.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00aff67e-59be-5d7e-a5bf-3255fa2af0d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonuscusu2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonuscusu2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d91d6bb8-4fb7-502e-a10d-3a3b6e8c5d61","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonuslariburada.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonuslariburada.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da983f74-2cbd-5c6f-a944-e5c6b7ce63c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonussitesivip2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonussitesivip2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1fa1179-8211-5e9d-83cd-d75fc2c61be5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusu-kazan.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusu-kazan.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfee0ab4-9eb8-52ad-98a2-d46a6d30ae22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusu-sitesi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusu-sitesi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa247013-40db-5773-9dbe-88d0031283a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusu53.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusu53.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e543c88-09b3-544b-b32d-c918f83a6124","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusualdin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusualdin.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--579ddb02-8b0c-5fd4-a9bc-6497c46e4210","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusuburda.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusuburda.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e5a8809-e753-5e20-aea4-9b54306c3d37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusudunyasi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusudunyasi.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6de22fe-8d67-5623-a2b7-0270092dbff3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusukaptan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusukaptan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a95810-b834-50f1-b6c7-b725ffbd2014","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusumvip2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusumvip2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2a35b89-7e2c-5631-a0d0-55e09a95fade","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusunuzvar.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusunuzvar.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b249c1a-9ff1-5163-8b65-b136f5446ff9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusuozelvip.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusuozelvip.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--802dd130-0a8b-563f-83c1-d937f3eef7d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonususiteleri2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonususiteleri2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fed1e344-bfee-5749-8bae-0e02b83c3ed9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonususitesi2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonususitesi2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5506a522-51e1-5f70-a64f-eb2876ab6aeb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusuverensiteler.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusuverensiteler.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cfe28e-b4f1-503e-a3e9-00013b6098ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusuverensiteler2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusuverensiteler2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c89cbd1-b3cf-5f5e-9aaf-9cce9bc48fc5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusuverensiteler26.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusuverensiteler26.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbbb9f2f-06e5-5cbc-9907-1d9cdf42bc42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemebonusvernsiteler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemebonusvernsiteler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22dde8db-f587-5c5e-a3cc-a1b266f4c294","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denemefreespin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denemefreespin.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a2a9e1-3f32-5bf4-ae63-0e9608a3c766","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denmail.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denmail.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db7b1f2-dd21-549e-854b-86d2596a18ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denoxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denoxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7663e7-ff2e-5656-acb5-09eb4b05c7ae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: denufex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'denufex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--46b61612-77de-5396-a83e-511eb2a2ffd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deocox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deocox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1aec538-4a40-5291-94f7-33e388fa5c6c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: deogax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'deogax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eed028-07bd-5dd0-a003-d2a95ef6ade9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: derewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'derewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c519b34-8979-532e-9577-bec8780e04ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: derozex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'derozex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b1a33b-db62-5591-be92-b08166ab048e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: desjardinsaccesdappareilenligne.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'desjardinsaccesdappareilenligne.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca8d830a-2356-510c-9b8a-bdd414969891","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: desjardinsaccesdenligneappareil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'desjardinsaccesdenligneappareil.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--194def6f-6741-56f0-a752-c8a9a4e2ccf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: desktop-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'desktop-app.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d47d40c-9ed3-52c4-ada2-e438db25d22b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: desovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'desovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3c36b7-aec3-5201-a629-62c03202c958","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: destekbets10bonus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'destekbets10bonus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcdb7caf-a063-5bb6-aa59-e8b49111ba53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: desuwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'desuwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c175585d-b404-5c63-9768-edc801390b84","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: devumex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'devumex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd89fb1d-ca5e-593c-a287-1f187e5c847b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dewue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dewue.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--745a47bd-ff9e-5312-8d51-474366b441cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dex-byreal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dex-byreal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61da939d-0ece-582f-8cbb-ba2dc0cabcb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: diamondsagencyod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'diamondsagencyod.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15890aa6-c3c0-5887-a9ad-b136add19016","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dianecarolholt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dianecarolholt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b177e1f7-c7f6-5d32-a5a2-45e595ccc0d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: diflucan-fluconazolebuy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'diflucan-fluconazolebuy.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c9d2cd-3771-5358-a944-a3493bdf0085","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: digitalredwoodcu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'digitalredwoodcu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2373b5ed-ac21-5e36-9193-cd09772c7d44","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: digitalredwoodfcu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'digitalredwoodfcu.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb9b106-6044-55a5-98ce-52bf7a1f7a26","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: discord-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'discord-access.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a27803ee-6ad4-56c8-a881-712fa965bba6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: discordsdota.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'discordsdota.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efcaabfc-a10b-5f28-9c90-25c4cfa58d28","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: discordx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'discordx.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ab66257-2e36-50f7-9450-c2c37bd2348c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: discoutandbenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'discoutandbenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8f74d3-6b11-5ccc-b51a-acbd43cd46d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: discoveruaebenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'discoveruaebenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c125026-5a27-5d83-85b9-3a531a363286","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: djesof.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'djesof.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf3c48b-5d05-5baa-849d-cf45b7222b12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dmca2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dmca2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df3e6ec-145d-5da5-9191-c46e270c3694","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doagox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doagox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa9d56b-6d3f-5aa7-8a7d-91a02daff1e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doahux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doahux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f5fabd-decb-53f1-95a2-e48576bd2143","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doecex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doecex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b0a735-d06d-5e8a-934f-0600f3d10c96","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doegax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doegax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a271a0-1463-5de4-ba97-4437d019e3e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65388111-3f6a-5ec2-b20a-d757f8e7a3a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dohwawazs.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dohwawazs.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5bde6b4-7c72-57ed-abfb-3e3cd1525983","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doladowaniaorangepl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doladowaniaorangepl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f93aba-ce36-5085-b69e-39602a940c19","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: domedagen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'domedagen.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a544a7f-8012-54bf-9803-c64d20266978","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: domewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'domewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419680d5-4fe6-504d-91d7-9145ea5720e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: domlnoss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'domlnoss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7beda943-6524-5c3c-ac7b-23c236dd57d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dopemex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dopemex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d6a825-b58c-5b7a-916c-5a9935f3ba9a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dopexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dopexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e026cb-2501-530e-a884-8d211cb2b8c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doufux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doufux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5194f1c-e1ad-5f76-8020-b3df114fc314","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycycline-100mg-buy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycycline-100mg-buy.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a0b1d2-c3b2-5d15-8684-526194988df0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycycline-hyclate-buy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycycline-hyclate-buy.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68961c7c-0362-5dd6-ab6d-3a032fefbf85","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycycline-hyclate100mg.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycycline-hyclate100mg.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d40046f-7e2f-5d59-a655-bfceaca6e2bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycycline-hyclatepurchase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycycline-hyclatepurchase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d49b7415-98da-53c7-8889-3c50125afdc4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycycline100mg-hyclate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycycline100mg-hyclate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87f1266-e4f8-5676-b24f-025d40a7b814","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclinebuy.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclinebuy.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4807936-b5f6-5dc7-8a8d-ad1a5271a881","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclinebuyhyclate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclinebuyhyclate.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cb2d7e4-a054-5396-b862-852dd5f69d86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclinecheap.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclinecheap.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61f4589-53ce-5d16-8576-26fe6b00cacf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclinehyclate-buy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclinehyclate-buy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86795d8e-364b-52d8-9fef-9a3d2b8931b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclineonline.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclineonline.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4949dbc0-5af6-5ddd-ae4e-659259d797cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclineorder.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclineorder.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff610fdd-e37a-5391-9993-3dc4e588545c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: doxycyclineprice100mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'doxycyclineprice100mg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb967cac-c230-502f-8b3b-6bcfc62ae441","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dozacoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dozacoin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c927cf7-77c9-5491-936a-2b3d9e6f03de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: drive-auth-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'drive-auth-verify.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6ad249-1c6a-5fb9-b60c-f18dc89191dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: drmelaxincorp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'drmelaxincorp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7af9d10-babb-5801-a171-5be117767d0a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dsadasdasdsad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dsadasdasdsad.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f4d6dd-ec35-5404-acd5-310a7b6136f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dsaseffrdfddf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dsaseffrdfddf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb1933d-4b5c-5a26-ac11-1d4eeae04f28","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: dsfkjdnsjfndkjgdsffds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'dsfkjdnsjfndkjgdsffds.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd55a28-9bf3-5e96-a28d-86bffd86d9a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: duadex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'duadex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4ff0ba-deca-53c7-b39e-64c1ed6d0727","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: duarax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'duarax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce5aac94-cb31-582c-be5e-3d097b812620","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: e-pasiaugos.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'e-pasiaugos.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27b7546f-55d5-50d1-a0ae-e80c10fe18c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: e91d389ad9e8af.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'e91d389ad9e8af.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f0b2354-cd8a-54a2-93ca-30fc65822017","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: easyswape.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'easyswape.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9cfd9c8-f2d9-5478-84d8-79cbfc83c829","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: easyweb-validate.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'easyweb-validate.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee4e23e-111e-5189-9193-73e6371bf837","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: easywebportal.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'easywebportal.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dded4ab4-48c8-51a8-903b-da584409b754","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: easywebsecurisation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'easywebsecurisation.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b817a78-2316-5e13-8c03-18e79d72d4be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eclipsestake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eclipsestake.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa735f1-6dbe-5c51-ae46-2bf2e9488a9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: edp-atualizar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'edp-atualizar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef423b66-e9df-57e1-a086-f6a231598240","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eegox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eegox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d1f019-ce7f-5b35-afcf-4f0d7990fb23","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: electronmanager.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'electronmanager.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1d37ba-7379-5759-bffa-95a1f96ab92b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: elixspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'elixspin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30b28c96-ad07-5a0b-a0c5-96f0a5ea5c81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: elonbeastx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'elonbeastx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3d43ac-7306-50ac-b85a-20f213256592","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eloncas.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eloncas.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d993ca5c-e4cd-54e3-abec-2f0c51438687","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eloncas.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eloncas.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1747b04-0e9d-5ad7-9c91-9db7234e5b68","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: emiratesbenefitssg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'emiratesbenefitssg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e564a524-df96-53a5-a914-68a86cc402a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: emiratesbrazilbenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'emiratesbrazilbenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--241e2b9f-8506-5921-89ae-2741e52fc94d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: emiratesbritainbenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'emiratesbritainbenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da59436b-c3f6-5dc1-bfbd-8451355d316f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: emiratesukbenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'emiratesukbenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2e3162-bd5f-5635-9112-9a454fbcd44c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: emotipo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'emotipo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c495cd3e-4344-5f67-8bdb-87889979be93","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: engineown.ing","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'engineown.ing']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b621aac0-8262-599e-bb4e-9a4ce6616437","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: entertheview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'entertheview.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a0332b-82d8-5937-b89d-95394da0587d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: enzyme-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'enzyme-finance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b7d668-b275-5605-b770-5faf4a42d7bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erhalltenn-sch.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erhalltenn-sch.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--452fddb7-ff0c-5f7f-b201-992fd98e24b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erhalltenn-schweiz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erhalltenn-schweiz.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f88b9de-d0bd-5481-9de1-6dbc3e6762ae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erhalten-data.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erhalten-data.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f584aea8-6e1d-5d24-b672-dea04b115a22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erisimbets10gir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erisimbets10gir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8d2ed9-c28b-5703-9bef-da0f563a91da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erlementss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erlementss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80da4271-72d5-5009-94d1-1b9194a2de16","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: erpbiotechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'erpbiotechnology.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81321267-203c-5608-ae45-8a7056e40406","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: error-panel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'error-panel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--503b14ce-9e35-5bb1-92bd-14c7b068a428","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ervestiumhungary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ervestiumhungary.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--334cf6fa-87e3-5dea-97c2-e8823a5e4926","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: es-correo.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'es-correo.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--915449cd-acb3-541a-8c28-2e8a71b9797a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: esl-bits.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'esl-bits.pet']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfaddc85-4189-59cc-9a20-1d762949adcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: espace-ca-pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'espace-ca-pro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0414d02-bb5f-5bf2-82dd-2ef2342af838","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: espacejeux-connexionqc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'espacejeux-connexionqc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90067bd2-9e90-56cd-9c3b-9ee9c1ba8bf1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: essentialsclaim-cra6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'essentialsclaim-cra6.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--465eea6b-c4bd-568f-ab76-66ea683fc546","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eswou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eswou.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--042ccc7f-ddd9-5108-83fb-0f4da216e72a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: etherexfinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'etherexfinance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f49986-b512-5177-8fe9-56e2e411d57e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ethosdebureau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ethosdebureau.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9273e02b-511b-59b7-a423-f128f9ef1557","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: etransfer-interaca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'etransfer-interaca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c85e394-857d-5148-b96e-7b4f748b9301","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: etransfert-lnterac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'etransfert-lnterac.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f9e589-d3e8-5662-9bd3-af83454a4052","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eugeroics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eugeroics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4b1437-a0ad-5c78-a397-4a3769f243bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eurochoicepharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eurochoicepharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7019b414-aef7-5c4e-b41b-83a47c7d86f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eurovan-transfer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eurovan-transfer.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f80f898-a60c-5117-a403-384f79639c38","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ewaneo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ewaneo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37124303-ea23-521b-b84a-a672a20b1ea4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: excel-apps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'excel-apps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a740103-6313-56da-901f-e7e81451c1cd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: express-checkout.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'express-checkout.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2635b965-4e5e-55a1-9c21-517d2b5d9903","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: externalcomms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'externalcomms.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d0bb57-1167-5f81-ac08-763e655ee8df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eyeknown-platform.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eyeknown-platform.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecd4cd5-58da-54ef-b102-c38779eac403","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: eyuboglutv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'eyuboglutv.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee659218-733d-539e-bb2d-fa4ce9f8c376","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ezyexams.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ezyexams.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cb99ee-225c-531d-a9bc-0be955301095","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ezyycommrca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ezyycommrca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a174877-14d6-554f-aa20-eebd2803c0d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: faceit-verify-account.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'faceit-verify-account.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4383600e-b5d2-5a20-8349-8c8ee1e50a3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fadowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fadowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2903f6b5-5086-5f9f-9282-2d61c0c76418","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fagolex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fagolex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f5f3d6-8f33-533a-88b3-c62d1e4e1c1f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fairpoint29.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fairpoint29.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90869cfb-2a35-5929-b282-19c7bae8b4b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: falcon-finances.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'falcon-finances.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02976971-2347-568f-b03d-c2bb2c316d87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: familybernborn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'familybernborn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc21a4e5-1001-5c60-827e-8beccfb5ed6e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: famowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'famowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca7f48fe-8243-5dcf-a721-926aeb426bc4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: faokox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'faokox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fa5001-ac1c-53e1-9fb7-d6744e27be95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: faowox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'faowox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb07ac61-92d0-52d1-881c-979d33a85034","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: faroxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'faroxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9e69f8a-17a0-5b4d-8bc0-12210c3d978f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3744527c-4b96-5801-bcb5-69edb3c6ded4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fast-passport.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fast-passport.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec0709f5-15f1-580f-a93e-2ba54e035500","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fastflux.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fastflux.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--699a881e-3270-5dc0-b0d0-2bce17688244","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fatecas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fatecas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d36242-7673-5a6c-b767-d8008e1b0045","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: faufax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'faufax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9769fd5c-4cdc-5772-9f8a-0f0e01d45423","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fautux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fautux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ead1c661-ef55-5216-a4ee-66819bffeaab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fauwax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fauwax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df2c620-b720-54d6-a952-7864eba99375","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: favorisenguvenliadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'favorisenguvenliadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37414ff3-76ba-5cad-a66c-869597700a92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: favorisenguvenliresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'favorisenguvenliresmi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5c1d15-1165-52c9-81ce-4fbcab93e868","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: favoriseninresmiadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'favoriseninresmiadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d1166d-899b-5a49-963a-d1f826440088","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feastwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feastwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81ff5592-9f8a-592f-8340-a2f942b4ceac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fenix-finance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fenix-finance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd016c21-1954-5a86-8e3c-dd3f91edc509","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feogox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feogox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b034856-5def-5af5-84c4-99da47d2bb57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e84ce6-3e4c-598a-836d-f2201b136b4b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feravex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feravex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a290d3-b2df-5412-b2d1-ad2403ba7d6f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ferawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ferawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd487a0-93f3-5586-8ce4-6e3dfb679e3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ferro-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ferro-protocol.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2b5bb9-7dae-5d62-8364-f3fe8a5e4a3c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ferro-protocol.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ferro-protocol.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55e45799-9a28-5989-8958-521c96b1421f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feudox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feudox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5bdefa-6df4-58a7-b36b-3a4454aff16a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feukox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feukox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--249592c8-ab40-5b10-9324-78adb74b0c83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feuvax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feuvax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72ecd10-cd9b-560a-b411-e4d6f40ad200","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fexowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fexowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f894af-7db0-5880-b661-c55ba70863f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: feyobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'feyobet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1a99db-c076-50c2-ac12-a7f8b9c65c9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb17f2ac-bc02-5860-81d7-5dc773819593","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ffsend.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ffsend.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dcc244b-88d0-5357-9d44-77a1bfcc58e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fh6-torrent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fh6-torrent.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f855f8-0659-5eec-a378-79ea1c1f19fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fiestawild.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fiestawild.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4235a23-df2c-50bd-8bab-369024663fa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fiipcash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fiipcash.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a783d0-dd39-5f35-95db-55d568428dbf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fijiwin-mx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fijiwin-mx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8974af6d-7398-51db-8587-b35ffcb852de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: filmguin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'filmguin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7dd00cb-5aca-5571-b805-8eb5a9d5e791","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finance-kamino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finance-kamino.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be6076d1-7e85-5cbf-a687-5aa8e6bc0a4f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: financecorp.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'financecorp.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfee71b-d0b2-53e7-8888-9fadb2b18de4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finanzportal-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finanzportal-online.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84fc7530-93b2-5a6a-8d5e-bc60d7acb6f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finasteride-buy-propecia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finasteride-buy-propecia.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56645173-5ee4-5181-8110-b2a3b6edb671","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finasteride-rx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finasteride-rx.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5499b8c5-c32a-5d6a-b296-29e6aa25c717","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finasteridebuypropecia.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finasteridebuypropecia.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf8f741-d5d3-5aab-a40c-64a1ec1228a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: finasterideonline-propecia.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'finasterideonline-propecia.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b13a6aa-7778-5865-a86c-b6b40efe3e79","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fireehousessubss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fireehousessubss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5049c35-01fc-5ede-b806-ac783b73daba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firehausesubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firehausesubs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95911b90-a19b-5ebb-a794-91f0f0a4b3bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firehoousesubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firehoousesubs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bdd1321-d80f-5eb0-bf31-0b144011cfa4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firelight-finances.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firelight-finances.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a6d65f-d90d-5710-89da-45b137710677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fireshousessubbs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fireshousessubbs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c38da68-1c50-53ff-acb4-a0f0bf5b7f2d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fireshousessubbss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fireshousessubbss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f5bf83-5839-59c7-9a4d-578d8dfc9ea1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firmware-management.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firmware-management.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64689869-d11f-5a3b-8f70-dacb311295d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firmware-updater.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firmware-updater.cloud']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e174790-a37b-545a-b317-885f21fba579","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firmwarecheck.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firmwarecheck.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--629f3bdf-651c-50b8-8455-633b70a33d86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firmwaresession.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firmwaresession.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2109af-4c1a-560b-9531-21fbf1d1c7b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: firstworldremitb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'firstworldremitb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d961cc9-8955-5c95-8baf-6c72ae7b12d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fit-weekly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fit-weekly.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e48894b1-b907-5eda-a822-e78d25666639","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flagyl-500mg-metronidazole.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flagyl-500mg-metronidazole.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4d8a62-f24b-523d-abd5-80625379387b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flagyl-metronidazole500mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flagyl-metronidazole500mg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce062e13-cda1-54c8-bb82-0d81f819a8a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flagyl-online-metronidazole.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flagyl-online-metronidazole.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4d15f7-9a34-5150-99ce-7eca881d3d5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flagyl-onlinemetronidazole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flagyl-onlinemetronidazole.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fc12178-8ad1-5499-b788-14f0de0eec7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flicksverse.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flicksverse.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd442aff-75d6-5dab-8f88-62f694cca48d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: florcaptmcnlf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'florcaptmcnlf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1685f2ed-b92c-5b4e-8390-49f11ce63227","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flourishglobalpeptide.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flourishglobalpeptide.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a73c4654-c7ec-5483-93b5-d4d2876fc8f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flying-tulip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flying-tulip.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ccb7ea3-e7ad-59d9-aa02-3afee99f4b04","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: flyworldbenefitom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'flyworldbenefitom.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a98543c3-8769-5d52-8337-c70509fd44d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fmwebstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fmwebstudio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8bec120-aaab-5481-9d34-dd15891c2aa8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fnskinvalue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fnskinvalue.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a63c24-8038-508e-b316-ad302b39a0a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fnskinz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fnskinz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e98369db-3281-55dc-84e7-f75496267785","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fnzilla.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fnzilla.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0682ab3-6bfd-5669-9c5a-ee5b72eae5e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: foapux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'foapux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b58906-34aa-5e78-b669-2164d07e1e9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: foenox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'foenox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2023ad31-b7b5-5fa1-99bc-fd9c8d5a307e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: folks-finance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'folks-finance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e548243d-4a1c-5091-83d1-261b59eca1bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: folksfinance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'folksfinance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1518e86-3209-57c4-94e9-253be4030bf7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: folksfinances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'folksfinances.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c356f7-208a-50ef-8cd0-353ffba3adb1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fomawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fomawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54279280-42b2-5406-a1b2-f04005e01641","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fondsconcilia.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fondsconcilia.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--890fa827-9721-5d99-bc69-6c5afcf861f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fonexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fonexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01a1f94b-9537-595f-a5cf-6838e5e68357","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: forever-hall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'forever-hall.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae676bd-5266-544d-ba0f-d8b0afdd0417","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: forge-of-olympus-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'forge-of-olympus-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f2d315-a630-5a5e-ab06-f07b8eff8d05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortbuf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortbuf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da27f5b-c454-52df-bc19-3d906c06e10d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortmie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortmie.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdefd4dd-9e0f-5569-9237-3bcdca61b281","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortnak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortnak.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b566b5e-d9fd-5f85-b804-1cc74b888905","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortrage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortrage.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ed0f86-26b1-5266-b86f-d79391a30316","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortscore.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortscore.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f14fa6d1-6605-5dd2-a5f4-9df679446642","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortspins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortspins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96913a98-a9d0-5f2e-b192-de786787deee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortsta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortsta.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--746582e0-b851-533e-a2a0-0fe54b26036d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortunejack-casino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortunejack-casino.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b5e63c-ce24-5f87-bfac-5b0e0cf152c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fortuneplay-aus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fortuneplay-aus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2900594c-81b8-58dc-b787-0bc1d6f16c49","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: forzabet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'forzabet.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec99a61-7e0a-524b-90e0-e6879a37ecce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: foundation-vote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'foundation-vote.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c441c4-1f0d-5c81-a56e-22143d8f0ef2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: foxetos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'foxetos.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08cceb0-63db-5502-924e-2738340d8d7b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fpfviewera.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fpfviewera.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e77ce73-b484-5ab0-b105-3f576f39ddff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fr-ice-fishing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fr-ice-fishing.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eab4b56-d08e-5d60-963b-58288f6462a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fr-mafia-casinos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fr-mafia-casinos.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--556674b6-4ebc-5e6d-b36e-e07ccb9cb122","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fragapi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fragapi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fdfa268-a104-5c69-bc54-424b06910c72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: framelasix500.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'framelasix500.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa7230c-fed8-5fd2-976c-a55c614342be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: franxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'franxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddde4e6-e331-5159-ba41-7eb11c17c7e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fraude-rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fraude-rbc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82383269-87ee-5d40-9d83-899f447e4fc8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fravixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fravixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18dc6357-6f84-5277-aa1c-17239da3e185","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: frceaptntlcn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'frceaptntlcn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a627936b-9404-5b08-8d44-3dc048ab50b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: free-pokies-bonuscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'free-pokies-bonuscasino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--479365c0-193e-5876-8470-cabb26254bcd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: free-spins-100-nodeposit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'free-spins-100-nodeposit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09519f35-2a31-5351-8d91-43667a980fcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: free-spins-200-nodeposit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'free-spins-200-nodeposit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28618b9d-d419-5454-8965-ca350cbbbbdc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: free-spins-no-deposit-aus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'free-spins-no-deposit-aus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcda92c2-3b4c-59de-ad71-7fecf12855c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: free100pokies.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'free100pokies.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0144ec3f-e0a3-5df4-ab12-a3ff4d394cbf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freedaily2invest.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freedaily2invest.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3431da-fd0d-5b28-9dd5-3480744e4ff7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freemodafinil.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freemodafinil.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e9f1fe-9ac0-5644-acf1-574aee8a02e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freezone-renewal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freezone-renewal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fd2d7df-2512-5f7f-b00e-87071aee7ddf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freezone-renewals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freezone-renewals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e5d06a-f1d6-5015-a2e1-afdc299ea3b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freezones-renewal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freezones-renewal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d75aaef4-2253-566e-b55f-8aeaacc21499","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freshbase11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freshbase11.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd8308a-203e-5897-a47e-12e536c50013","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: freshinfo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'freshinfo.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--211c5869-9032-5707-b406-d746c7408c4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: frostjack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'frostjack.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8450a0c4-2d5c-5990-9507-f226a4b0991a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: frostysmm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'frostysmm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0d2f55-bdab-5aed-9b11-04f6e5e34dcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fstdep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fstdep.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3781377a-4227-5952-9ff4-937157bf257b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fuasux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fuasux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20730c98-47b1-55c7-91ce-7c81c794da82","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fudowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fudowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3ef1561-ccad-52a8-9f77-5fd4a516651a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fullgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fullgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8841f5a-2f83-5de6-b978-e30186233c4e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fund-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fund-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05f1a10f-6b51-542b-bbfe-010a6d776a53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fund-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fund-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb3497a-b5e9-5f7a-ab66-5ec23b1f37f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: funforwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'funforwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7953995-9153-5926-b7c2-0fbaf27788bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: funkhousermotor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'funkhousermotor.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d18d48b-cdab-58c8-a46d-cdd7c7e53ee2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: funsly.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'funsly.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b3d3ecb-141f-580c-ba12-76f1ca34cff6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fuokex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fuokex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14c0bec5-d99c-5abb-8ecd-0dbdbb330e17","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fusionminepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fusionminepro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2ba2a4-2382-5db3-bc58-93878305e584","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fuxowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fuxowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abbd021-1a9b-5540-8f75-7afbd00b0831","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fuzawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fuzawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e7ea1d-ee32-51a8-889a-f456e810c15e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fuzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fuzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99579a2-4507-5de9-bf92-4a62903599af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: fxchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'fxchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fbe328-4ed6-5ae4-bcf4-602a0fc08f86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: g4skins.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'g4skins.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e9d59a-d984-5bb5-8b46-1b701e5b2b38","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: g58p28r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'g58p28r.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22bb5a76-4b8e-5b2f-8670-d725b80a3831","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gadaihuat.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gadaihuat.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92598b1c-44ce-5dbd-ba8f-9017bc5036d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gahmspharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gahmspharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b57013-88bf-5d9a-b666-c688ad937ac8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: galabet-tekgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'galabet-tekgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d08b1fa-e888-50b4-814e-b350455f8e62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gambamax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gambamax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54760d9d-8631-5120-92d8-5ed069f10821","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gambixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gambixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf3b63f-eca7-5c0c-8280-28a1d6ee3b2f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: game-giris10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'game-giris10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88b7f51f-65c3-5f21-bc6f-70c32c7d8589","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gamecasinogamble.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gamecasinogamble.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32809f53-9515-5167-87cd-df2fb77a5bc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gamefi188a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gamefi188a.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--641e4c86-a43c-5b87-b968-935abb1703b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gamefi198.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gamefi198.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2829b84-6047-5da1-9768-68fae8700b13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gamesofbeast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gamesofbeast.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50308ded-b095-5199-ab6b-cee7a0fc65de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gaohux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gaohux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbecc9d8-19c2-5ba0-97ef-5ac665012471","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: garantpasport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'garantpasport.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b9c5dd7-1f86-54c6-8246-e2a89d2c025c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: garovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'garovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c10c58d-981b-5b85-8db5-e289cd7a9760","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gasfreetron.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gasfreetron.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42407d3e-fe74-5ca3-8745-67a8df820bad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gauntlet-xyz.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gauntlet-xyz.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fad1ee5-ac28-5e12-a28f-dee4291142be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gayneo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gayneo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5884af0-6276-56f9-b077-e1de9189a31b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gc2sev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gc2sev.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01734950-c082-5d0d-be1f-30b8de790231","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gca2rev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gca2rev.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d84fb7-7235-51b5-a2f8-d1a7927d0568","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gca2sev.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gca2sev.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9723ec5e-26b4-5000-914e-58e7ddbc768d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gcc-aramco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gcc-aramco.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bf27e4-065e-5e56-8cef-df91ffe979e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gedofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gedofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e73ca39-0f93-564a-bd77-b2fdeb08c55e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gedopex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gedopex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--365e1203-bb9d-5115-ba87-576cbc4cf1a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: geliosweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'geliosweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec23b298-d37e-5f8e-94b8-dfbc802cff8c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gemobex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gemobex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc1ca3c-c414-56c3-8dc5-8bbabed51f65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: genericreviewsindia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'genericreviewsindia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26adaf1d-061b-5443-8a47-ffb91ab39fa8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: genmusk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'genmusk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb773eca-3468-5f65-aa6b-28f6959aa69b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: genofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'genofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368084d0-5290-589d-83de-a51da98d7908","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: genudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'genudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4a46ba-ef01-5070-a9ae-0b38ef9e1761","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gepofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gepofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f8f30b1-1494-53cc-9851-a1cc45853893","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: geporex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'geporex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc65e8d7-863a-531a-8278-79b28a7fe708","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gerovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gerovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89cfc669-8c73-51f3-b94a-694cc11ee692","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gesofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gesofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af62d8a5-c1f5-57e8-92ad-208cf69a243d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gesowin77.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gesowin77.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec3f591c-33a1-5b82-9db7-0a02e159ff92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: get-polymarket.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'get-polymarket.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66296688-b124-510d-b2bd-eb73d2d04b55","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: get-trustcard.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'get-trustcard.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb776c2-1952-5a8f-99b0-14a3f82259bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: get-trustcards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'get-trustcards.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01949adb-cdb2-5ca3-9ae6-e5aaf346599d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gethelthylifestyle.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gethelthylifestyle.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8447bd3-b20e-5e8b-ad9b-cf2bbfb0b6f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: getslots-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'getslots-au.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae07d6c9-fff9-5883-8c1b-64b5f7d77629","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gewomex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gewomex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3509a3-ea60-515b-970a-2604cf655c8c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4584cecd-31ee-5a40-a322-6c4598e47210","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ghostgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ghostgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ca24f8-75e4-5fba-93a1-9d55b36c9fb4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ghostqrpanel.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ghostqrpanel.bond']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2ba2be-5e1f-55c9-bf52-710e21169dbe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gift-everyone.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gift-everyone.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b0d4d4-d54f-5c1a-8356-bdb3e4385c57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: giftmallmycard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'giftmallmycard.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--807980fc-d515-5263-a138-14d5e8f3a7e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gigbergluis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gigbergluis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04918dde-b9c5-5be4-8f4f-545f7422cdbf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gir2026.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gir2026.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ce334b-1bba-562f-8ea9-d7291ae4f8bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: giris-madridbet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'giris-madridbet.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac31968a-7cd0-5f8f-b198-b7fe4232ece8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: giris-turkiye.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'giris-turkiye.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78bb55f-04f8-578a-8fb0-49c3a4cdcda7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisiniz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisiniz.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28396f87-e70f-5d05-9018-7cfd41e2edad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisiniz.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisiniz.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73de1995-e223-5a01-b5ab-e6d79dd364ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisitesi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisitesi.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37e1d75-5805-59aa-baa5-5b5f793a33ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisler.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisler.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e2bb33-b74b-56ef-827a-92ea5169f17f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisler.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisler.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0c91d9-fd55-5e95-97d9-e12f16280406","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842353ac-07d2-5c6b-9ae8-ac46d4b19134","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisler.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisler.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69417bc0-6ead-539b-8894-def2e29daa91","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: girisleriniz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'girisleriniz.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4871f9f7-f0cc-5bbf-bd30-84153b0422f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: glavniyadmi.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'glavniyadmi.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea7a0f36-b577-5091-99a4-6df2d9db9ef9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: glbiochem.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'glbiochem.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b7016-e1c0-53ae-9ac9-f35d01ee40f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gleevecgeneric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gleevecgeneric.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d971f79-4291-5094-93f6-124a7bfd1921","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: glek-panel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'glek-panel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc4bcec-9641-5189-b4a8-191cbbd1bc05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: globalpharmacare.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'globalpharmacare.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--628d6ee8-243a-5003-b95b-1e9d306ed48a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: globalweb3exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'globalweb3exchange.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a761040-2875-5eff-bb7a-339158bcf5ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gmail-19245323us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gmail-19245323us.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65fbe72-b279-598a-b793-9b70e2df2814","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goamux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goamux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--971867ad-35f5-50ea-9d8e-e1bc5009249c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gocialise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gocialise.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529d5550-281f-5247-a00c-21a4376b6a57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: godowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'godowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--675ca01f-85a9-5c78-803a-0a252cfd7885","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goebux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goebux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b86a83b-4444-5da6-bd0f-b6a243eb63d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goefox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goefox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba140c9-7113-5599-bb7d-f5291d100e45","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goehex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goehex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5fb81a-4140-5ca8-9c80-2a27bd80fd52","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gogambl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gogambl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--557c8d7f-fe7b-537a-9019-6a335bafde1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: golbeterisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'golbeterisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c875b48a-6a0a-5689-a1a2-6563946090c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: golden-era777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'golden-era777.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e763caa5-5b6d-5aa0-a6a9-b3fe12a6a7b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goldrize.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goldrize.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22aa5c15-67aa-517e-a5de-4ed99b4e3053","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gonebet-egir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gonebet-egir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c7c8cd-ff3b-5c54-a926-0c32491936bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gonebet-kazancli.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gonebet-kazancli.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0caed1c-3ef8-5f4b-96c3-0575c7905cd7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goo2bet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goo2bet.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe218c63-9809-5477-918c-e775364fba33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goodwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goodwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b20c706-2ca0-5656-9912-199b27790d01","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: google2oauth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'google2oauth.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc87bd99-c0e1-5614-9419-dbc7a1d5f50b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: googlebets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'googlebets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb0c281f-053c-5e18-af33-6c4e3761bd40","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goonbet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goonbet.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fdfa622-cc8c-5659-94d6-4ed2a9ea3eea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gorvixo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gorvixo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1c9e22-c8dd-543d-bfc9-59d8c1031cda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gosavehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gosavehub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c6459c-3185-5ae9-8522-1e3c98997843","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gostwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gostwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6f8172-e016-5519-85e4-59c6df6fab09","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gotexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gotexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449c41cb-3353-5001-bc5f-df47263038c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gotofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gotofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85d7d29-39f2-517f-97ac-b57463594bdd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goufax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goufax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb5165a-b524-5974-8723-8f8f6a928fd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goverify-faceit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goverify-faceit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993e381b-7ff8-5d4e-9dec-ad9db25e3b86","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gowcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gowcas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a33db4e3-a899-57a4-8214-10dfcfced405","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: goxcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'goxcas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f8109b1-51f9-5cd6-bfcd-b05a9fe46be5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d7fec7-39c7-55c9-9531-e58284d6156e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gramenbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gramenbank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be85eb91-e702-50f8-867c-69b440f263cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grammarlyad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grammarlyad.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--276c7ce2-5f2b-57b2-90af-61a2b42cedc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grammarlyads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grammarlyads.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35cf3ff9-50a0-5682-8fd0-6cf120696c6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grammarlywork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grammarlywork.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3990c02a-77f3-5e7d-b957-77bf5682b88f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gramoplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gramoplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ce6fb7-98b4-5d1b-9b93-eb6a3d864eec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpashabettradres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpashabettradres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa509378-a2ad-50fc-9f6b-a3d5dae3123d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpashabettrguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpashabettrguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4100b0d-d0db-53c5-b3c7-504aec3e479d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpashabettt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpashabettt.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07b5ae7-246d-5d53-9297-ca4b8453b5c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpasharesmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpasharesmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff4507d-5c27-5b4a-9096-5fedf4b7bfc1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpashatradres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpashatradres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b640615e-034c-55a6-b99b-9398705998d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grandpashatrgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grandpashatrgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ebc710-91d4-59af-8157-6c2c436ac8a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gratorama-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gratorama-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9bc475-c67d-531e-bbe2-6f3c8587caca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gratowin-casino-slots1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gratowin-casino-slots1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cff0598-6b21-5cc5-b6e5-b30fc061735d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gratowin-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gratowin-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3421caac-26c7-574d-b998-8fff48f8add4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: greatwin-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'greatwin-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--340b84c7-404f-5bee-97ed-0acced5a1790","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: griezmannbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'griezmannbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3117f202-82b1-57e6-afbc-fb36dba1c554","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: groceriesbenefit-cra1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'groceriesbenefit-cra1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d289d266-0661-5739-b559-bc46818d9d25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: grove-finance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'grove-finance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77745a8a-442b-5f5d-8c82-cee68f5e19ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gsashotumail.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gsashotumail.bond']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6957cd9-c053-5293-bc97-db15a168553c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guapwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guapwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8dc2dc3-c80e-52cd-978e-6580b55136db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gudorex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gudorex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee53c2c3-25a6-561c-b8ad-e7dbd1beb7ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guecax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guecax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ad4a07-758e-53db-bf93-c8b370e23adb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guest-reviewbed.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guest-reviewbed.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfa4d39-e014-536b-9088-4454e0728aaa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guhebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guhebet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf290a54-a25f-51e1-a0f1-1086417d9a25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guicheonlineweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guicheonlineweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c6ad4c-c78a-58e0-9f56-045f1c40862b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncel-madridbet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncel-madridbet.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cddc76-bd47-5de7-8374-3127a6458b49","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncel.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncel.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed212318-73be-567d-b418-66c7f028ab2c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncel.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncel.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c901e07-3582-533d-bc06-2d3fe7b33079","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gunceladres-bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gunceladres-bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50215262-e55d-52ba-87af-f60f7829beb7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncelcasinositeleri.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncelcasinositeleri.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b86d0de-d91a-553a-a1ca-f1d1f9e01329","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncelcasinositeleri2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncelcasinositeleri2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ab3916-4b27-54cc-ab4a-77b9ecfe3ae4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gunceldenemebonusu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gunceldenemebonusu.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--862c4eb4-8b42-5d1c-91d0-5318e43f6bcf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gunceli.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gunceli.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbd04de3-e8cd-528e-b48e-186af6b4e96a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gunceli.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gunceli.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e913f7-a0a5-54e7-b840-6a7e17ed902a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guncelslotsiteleri.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guncelslotsiteleri.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59763dd4-597e-50bb-84db-46640560360f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: guonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'guonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4654bb48-9428-5080-b7b6-b7324df7e83f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gurme412.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gurme412.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01869cc0-9e3d-5ac3-9916-c845abcbf18e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gusewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gusewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a68590c-af2b-5b53-985a-8facbdf0a2c2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gusewin256.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gusewin256.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec718b69-efa2-5d0f-af67-f5aed6f2d1ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gxmble-casino-france.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gxmble-casino-france.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60924dec-32dc-5f78-afd4-547cbfd4338e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: gyroscope-protocol.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'gyroscope-protocol.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7223c552-8155-538c-a1ce-cd9d172bcb1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: halifax-identity-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'halifax-identity-uk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15365f4-f722-5c86-bb02-4d96e81a4e40","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hallsforyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hallsforyou.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85b9f02-e46c-5145-813e-ff3e35e76caf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hanivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hanivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabe430f-c971-5a7b-a9cd-a04676a0f869","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hapevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hapevex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64fe4160-765e-5709-b6a8-555aa335a007","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: harbiwinaffilate.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'harbiwinaffilate.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7ae8f1-8eb4-5018-83f3-f9302908a06e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: harbiwinhizligir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'harbiwinhizligir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca78a16a-5850-5b1e-aa20-ac9cc74babae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: harmonix-fi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'harmonix-fi.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7550f8c1-e1a2-51bc-837c-3fdbae7b3d6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: harowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'harowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c7ffa6-9207-589c-b525-ade599744f41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: harudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'harudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--582276ac-52c1-5652-979f-f02c2dc910a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: haruwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'haruwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70f0755f-e61b-5d27-bc74-0e2227030275","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hasewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hasewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d242823-9713-54f5-bf1f-16227eb2e9d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hashflow-dex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hashflow-dex.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac4872a-d5c1-5c65-b5cb-f05f31722856","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hasobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hasobet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ba6474-3761-534d-b7b6-ed10c070d463","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hasobin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hasobin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--517e7068-a6ac-5350-a424-873d1c551779","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f0d1e2-c0f3-53d7-bd1d-6e57041a9f03","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: havawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'havawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5142230e-4135-5af4-a84f-078193aa7418","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hawanex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hawanex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf31bee-ae83-5b83-badb-9eefab6b7de4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: healthdepots.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'healthdepots.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--343e9d62-ecd0-50fd-9cf9-82a34a252454","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hekawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hekawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7928754-7bbc-551d-b65b-4f56e2789249","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: helawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'helawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff58030-7dbd-5b57-a9ce-9045d148ccf1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: helionlabs.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'helionlabs.store']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e6bdf5-e3c8-5ab8-8b64-3a2fd5a7859c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hellovaulto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hellovaulto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c961bc-eabd-548a-b3b6-cfd0050cdb25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: help-amex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'help-amex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da03a033-ed66-5432-b1a5-4df88e7a5237","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: help-minecraft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'help-minecraft.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e6c299-2c91-5af3-987b-7ce6303b64aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: helpline-yahoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'helpline-yahoo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ec6431-3c2e-580f-98f3-276167a0cde8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hemendenemebonusual.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hemendenemebonusual.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5af49c7-0bc7-5b7d-9258-a88fbf0a7070","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hemivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hemivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53336908-ca4c-5437-a6a7-982f9c8a965b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: henofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'henofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d45798-184f-5b14-8a34-401d3f87109b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heodox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heodox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca808686-090e-57ed-b395-13575ef8feb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heodux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heodux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c61790-e9ee-5d57-abb1-4e15eafa1970","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet-gunceladres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet-gunceladres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c043cf90-b58d-5bf1-9a7d-a78d711bbce2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet-guncelresmi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet-guncelresmi.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--257d1985-49e8-5f78-b5cb-b5eb34b45ed3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet-resmiadres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet-resmiadres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1eccc29-b883-5ad5-9ec3-17d2318f0cc3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet-resmiadresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet-resmiadresi.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--195edb04-a573-57fc-9ac9-c4275acb2cbf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet-resmitekadres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet-resmitekadres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701e620e-3937-5a9c-b5d6-572b978a1932","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabet.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabet.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f36f06-6e06-557d-a041-a45728f555f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabetci.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabetci.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b1126c-6ba8-5afc-a8ce-8b2b1e010372","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: herabetim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'herabetim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fb6080-2ef5-50b1-a40a-bf4ee167ab24","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hesobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hesobet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52746329-cc38-5c4e-9cfc-e7250a96c845","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hesobia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hesobia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffd31df-a5e7-5281-bddb-55be6b9e35d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hestwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hestwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf5e1a42-8999-5684-860a-a4bb135fc455","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hestwin255.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hestwin255.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28374a72-7a84-540c-b253-2c77adf0f29a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hetonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hetonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74cdaa5c-c929-5384-a29b-df9bbf8fe61a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heucux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heucux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cabf6266-1a86-5556-a36d-933b0b47f410","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heugox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heugox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08f61470-e299-5441-8eff-34364308ae15","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heuvux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heuvux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6ab56e-1416-55b7-8a83-8aba196fce7f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: heuwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'heuwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed69a35b-f4bc-5fb6-bf5e-e42bf3e7ad0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hexchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hexchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89b6dc2-ba90-552c-978f-977aa2a06450","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hexowin149.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hexowin149.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87ff62b-9ac7-5c07-8e95-e011456e03a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hexowin167.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hexowin167.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b225dbd6-d028-5205-86fb-837cde118e1b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5392d8-be95-5d13-8780-f6845a699822","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hgiknyffghgf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hgiknyffghgf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e695bbdd-5c2a-5a1c-b482-9e22be1e33d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: highroller333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'highroller333.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f297dad7-e19f-521a-8b73-e04f14a3bda9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: highstreetpharma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'highstreetpharma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d27ac698-6245-5b49-80fc-347c84df3eb8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: highstreetpharma.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'highstreetpharma.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600a570d-7331-568c-9b3b-d9aed1ddecfc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: highstreetpharma.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'highstreetpharma.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e08e1d7-9040-5cf3-8c46-bb4f38b2033f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: highwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'highwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--631d327c-d04f-50a5-baaf-10b0c31396bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hilbet889.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hilbet889.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fbfe3f6-6724-59e9-9b7e-66f438c80dca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hilbet890.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hilbet890.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd55093-e8e3-56c5-b8aa-eaebc1300aae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hilbet891.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hilbet891.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ca2864-201a-5bd8-aafa-ead49022ab4f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hiltonbet1791.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hiltonbet1791.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5516f953-c792-55ce-b5fa-bfb2b083db58","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hivprep.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hivprep.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8b7d19-6534-571d-a73c-ae32715fda7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hoebex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hoebex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cad2fdf-6dbc-5a14-b4d9-f76d66d64e7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hoewux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hoewux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba548d55-a47d-5238-88c3-f34afc5b9814","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holigan-betgirisamp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holigan-betgirisamp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--893a497a-1eff-51fc-bcb9-3832ae76b8bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holigan-betgirisinfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holigan-betgirisinfo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--690b862e-6505-549e-ad32-20eb5fba1e33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbeetgkatil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbeetgkatil.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f1f6323-75e9-56d0-81f2-081f0440a849","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-aktifgiris1.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-aktifgiris1.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc640a6-2cb7-52c8-acc7-b8e2cfd000b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-bulgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-bulgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4a72ae7-cf18-5ffa-9b05-b583d22fa7df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-canli.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-canli.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a828dbc5-eed1-5809-9c03-585fe442b9e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-erisiminiz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-erisiminiz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfc98c4-51a7-5eb3-850b-e22d54728ccf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-kazan.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-kazan.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc848294-a918-5862-854b-04fd575ddf12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-loginsociall.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-loginsociall.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb257553-9de6-54f2-92e5-8f655c6a86e1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-mobilgir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-mobilgir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2f977a-5819-5c91-9791-c8ad7e22afa5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-tr2026logins.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-tr2026logins.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4569a4c0-f368-502d-9644-ac02b07c7419","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet-xigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet-xigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--552c1de5-cd05-5cf1-8d98-6ad2005c2bb4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet2026-platfrom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet2026-platfrom.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7998430-2290-5185-ac33-6c26d2d31221","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbet2026gir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbet2026gir.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2f92c4-6838-59ba-acc4-4c17cbc3421f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbetampgir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbetampgir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--573cfcc6-6a22-5f36-b029-dc56ca42a100","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbetl348.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbetl348.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae0c0fc0-b826-5f6b-b0d6-0d074c943c3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbetresmioyun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbetresmioyun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4aef031-f007-5248-97a2-ec64e567f060","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: holiganbettt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'holiganbettt.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e9479e-2b5b-56ed-8471-bd2b0550a407","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: homazex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'homazex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fe0f653-7a4b-56b6-97e9-ef9b3005b638","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: homopeptide.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'homopeptide.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8033f747-4f15-5bfd-9331-279b23755b2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: honevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'honevex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a4fed8-05ce-5843-8467-b018f4756859","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hooliganbet2026.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hooliganbet2026.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e435f8-0f7e-5a5b-8c4e-30311e4d29a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hooliganbetmapgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hooliganbetmapgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c18f16e-4cfc-595a-8545-63f5e6e8b96a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hotel-eu2947.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hotel-eu2947.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d93df6a-5170-5601-80d7-793f2eca07af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: housux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'housux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5efc775-cf4c-5666-9af4-b10734e20915","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: houzux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'houzux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde86c35-3f21-529c-8a61-7314c02ebf87","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hovexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hovexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35490a7-49af-523d-a7f9-d3f1abfe248f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hoxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hoxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3afcc4fa-ce23-5869-b26d-b180dc18a2b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huafux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huafux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f51a580c-ddec-5ee9-a4f9-2edf83e7459a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huahex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huahex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6487d561-020f-5407-b33a-0ab45e509272","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hubeijianxiang.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hubeijianxiang.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--240bf3a9-2345-5438-a1f5-e4f00492c588","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huedox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huedox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e682dfa-9d5b-59bf-9100-050ee21236d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huesox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huesox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96a648d8-76d9-52b6-a8e6-53c20e75fec6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f0412d5-ca0c-5cf0-a005-a156c2e817c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hunebet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hunebet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85112c-a880-53a1-99d4-17a9917b7130","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: huowux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'huowux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--847ed8fb-fb6c-5031-87c1-aa8b394feded","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hustwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hustwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--df13ade9-e2b3-51e6-991e-f21a2f29a495","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hydroxychloroquinefda.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hydroxychloroquinefda.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ccc9b88-f07a-5752-b653-6727a63c3160","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hypeemax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hypeemax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adb4efd0-d758-5792-95d8-fb07fddb1fc7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: hyperliquidd-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'hyperliquidd-dex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1462a1-5e8b-5574-95bd-2dfd6405e2b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ialop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ialop.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca537f3-e361-5f05-b2d3-c5b50eb873d5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: iap-url.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'iap-url.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4dda9d5-d5cd-51cd-a171-59ba5a43b76d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ibmautotrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ibmautotrade.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0cf952-1db4-514f-8768-9a706f24274b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: icedwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'icedwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1009ee3-7366-506c-9534-0039abdee19d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: icloudfinddevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'icloudfinddevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8447797e-d609-5eae-900d-fe73dec5728e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: id-myaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'id-myaccount.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb46d03d-606f-525f-840b-907c7a1dfb10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: id-ox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'id-ox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd2aa4b-31b6-5b87-84bf-5fb6c2b6f8e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ieasycommerzb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ieasycommerzb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4df54e-4691-511c-93db-c3c0769d539c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ikimisli-betgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ikimisli-betgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a9c383-894e-56b3-98fb-7b31599bce57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ikimisli-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ikimisli-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa986f9-92d6-5802-b1fe-1dccd969be67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: imagefreegeneration.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'imagefreegeneration.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f353e25-a63f-5347-9419-cf75986d5182","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: imajbett1610.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'imajbett1610.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f7a5b1-39df-5883-9d5f-e7ee0bfcb757","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: imperiodigitalhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'imperiodigitalhub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b682265a-2627-52b5-863e-8fe8336f7d03","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: imperixa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'imperixa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15bddea2-930f-59fa-a1e9-ffd7e43a349c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: impotauto.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'impotauto.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2bede5c-99ac-5def-adb9-c012d156b331","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: indexiplex200.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'indexiplex200.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fba9a19-1cca-54f3-b3c5-f52ba1e618be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: indexiplexai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'indexiplexai.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d16ba214-3107-51b8-a8f6-40318149e262","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: infocgeb-claimnow1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'infocgeb-claimnow1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--622462c8-5e61-5978-b99b-77d3c885870b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: information-guest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'information-guest.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed21bd2-868b-5ce2-ad55-bd581513d76b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: infosnet.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'infosnet.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e46973-6b3a-5ea6-a1a8-bbdbb8639e66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: infoupdatecraportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'infoupdatecraportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e89829-9011-5e14-8080-9101944cc008","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ingress-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ingress-hub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5070a5-5f9e-5bbf-a675-a35c6e5d9d9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: inhelperpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'inhelperpro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d1e7ef-d54f-5c19-8449-43a02b9ac11c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: innercirclelabs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'innercirclelabs.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f94e5bc9-213a-5345-ba4b-bcb602c15532","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: insidemusk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'insidemusk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c70f186-30b8-5a28-aa74-b42e8b09b39d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: insidevaulto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'insidevaulto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afbd28d-5072-5933-8b3e-abd69f490d35","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: install333.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'install333.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8d69c4-a43d-5b15-bd00-f1d2081c94c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: install334.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'install334.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe5ec664-cf98-5e77-bfe3-e8afefb8283a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instantlasix300.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instantlasix300.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f8a3e1-1d0d-517d-a001-1accdae61cf3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instantpy-acc20.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instantpy-acc20.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a5f5c0c-f301-5504-a572-3d9e1c89ae3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instasolana.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instasolana.bond']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--618fe055-3eec-5c9f-af91-0a70f5f8df64","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instruction-cibc-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instruction-cibc-login.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2082cf-95b1-525e-a76a-997be3921d42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instruction-help-td.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instruction-help-td.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce03da83-df02-517f-9c64-83885d144dee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: instruction-secure-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'instruction-secure-login.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359b493b-68cc-5db3-8fd4-a63b992b0190","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: intellasixnx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'intellasixnx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c864a4d2-2ca7-5b44-805b-a69a2ae523dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interacgigadat03paydirect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interacgigadat03paydirect.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b872c6e-d9a7-585f-939a-71d2d5e7f71e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interacgigadat520.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interacgigadat520.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89facad-3064-54b3-8997-d3e0a2b3346e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahis-gunceladres.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahis-gunceladres.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddcf59f-3cb5-5cf7-9823-905dd2c9288e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahis3855.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahis3855.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3e506c-f3fb-5fb2-8f8a-0591f41eef26","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahiserisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahiserisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d945f14-1111-56c1-a050-4a2ab376b379","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisgercekgiris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisgercekgiris.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c95f67e0-1e2c-5e37-bc7f-9acdaf030590","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisgirisim.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisgirisim.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dad80e9-0e68-5938-8a0f-1dfa6ea66e44","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisgirisim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisgirisim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77fed4eb-f7ea-5e4d-9f74-a3e4f04ab853","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisgirislerim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisgirislerim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f616ab8-996c-53e6-a5f3-55138f6a2677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisglobalguard.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisglobalguard.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f4d659e-3b82-5e0e-b6c4-57cdb15c5189","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahishizlikoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahishizlikoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f037fb66-aca0-5069-897e-80765a557b77","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahishizmeti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahishizmeti.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5086d1-6d4e-5274-9898-1d48e914ce8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahiskoru.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahiskoru.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aed85b5-1950-53af-ab6b-ea7e74d8d8c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahiskorumam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahiskorumam.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5560e982-d7be-50b3-901b-60b8192281b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisresmigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisresmigiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1c2565-4d6a-58a7-afdd-7240a1a4ece0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahissalan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahissalan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3d5f86-237a-5f49-b2d9-b8410c786fbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisserisimkoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisserisimkoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb9bc105-6026-5fbe-b125-2c0b002ee5c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahissgenelkoruma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahissgenelkoruma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bd2cdf-18d1-59e0-a54e-91f775c7d8dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahissguard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahissguard.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a1153fa-a286-5f7d-af30-785798623298","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisskoruma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisskoruma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26120a4-13d0-52ce-bc0f-3979156419a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisskoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisskoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81dd144e-6f9e-5dfb-968d-6244dd4cade8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisskorumagir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisskorumagir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c0a5f-bd39-56ea-b06b-50f69a3f0bec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisvipgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisvipgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--417c49a1-d8a8-59d9-bd7b-866e0a93ab3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahisvipkoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahisvipkoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--741aded9-049e-50a2-83f6-a2652b95a4cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahs1850.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahs1850.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0668cebd-b3b4-591f-838a-fe46f6c901e9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: interbahs1855.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'interbahs1855.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24204a36-f3a4-517c-85e1-44c5087386dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: intesa-banca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'intesa-banca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--840598ee-2309-53bd-a27d-8cc1d72aa129","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: intesa-banka.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'intesa-banka.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4852a6fc-474f-526f-9e59-a59984f56983","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: invariant-exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'invariant-exchange.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43de1200-ab4e-59c7-bbb4-500ad28ef8ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: invariant-exchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'invariant-exchange.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e6a952-f208-5e51-8b91-9a8d8963e1db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: inventorynite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'inventorynite.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4197de03-0cd0-51bf-970c-1117ab6259e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: investlim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'investlim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0efde5a0-f512-5269-85a6-6a0d1a17038b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: invite-tracker-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'invite-tracker-verify.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--368389e1-82f3-54d9-b212-859f9d595589","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: invited-rewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'invited-rewards.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35c11c0-141c-5cf3-95bf-0372eb27f01e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ironcladcapitals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ironcladcapitals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c5491f-f8da-5823-a1d6-326f560cf801","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: isdinm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'isdinm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f98a1f-fe33-5ed3-92e9-a1a2852aa758","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: islamibank66.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'islamibank66.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906d073a-bb3c-5c93-9b5d-4193d1bc439a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: islamibank9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'islamibank9.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ccb3ff-d48a-5198-9c5a-b27f9bbb669b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: islamibankrin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'islamibankrin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9381f082-9e4c-5ebb-8d38-2aab2f99563a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: issacpharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'issacpharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e63676-5cd8-5ea7-99a8-a86af0987f7f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: italovio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'italovio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66517504-215b-5288-81fd-81adc98f02d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: itweu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'itweu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde1a940-791f-50e1-9ac1-aa820553b5e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ivermectin-3mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ivermectin-3mg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbcc7e19-e47a-5cdb-8c7e-148bab3cf0e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ivermectina.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ivermectina.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d77dffcc-5d41-5070-9049-b1ee1eaec6f6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ivermectinsts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ivermectinsts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40b75b8b-82f9-5237-b184-43ba001e7129","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: j0j0bet1155.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'j0j0bet1155.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a98a419-9e9d-5d91-acc7-e99c76a1968e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: j8d1a81mhvxhur.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'j8d1a81mhvxhur.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c462784e-51d6-5429-b386-d099bd40fe03","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jamescasonllc.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jamescasonllc.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b20dddb-f310-5252-952f-844e5d2c60dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: janiwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'janiwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--594828b1-536d-5737-91e3-8489d8f2cc2c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jaovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jaovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a1c71e-4e78-5ab5-a39d-dae409d323eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: japanopenchains.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'japanopenchains.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--870c670f-375a-5607-9318-fd572e67059d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: japowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'japowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7316c19-1b99-5206-a3be-ad903b65d8ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jasansbeli.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jasansbeli.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2db0ccc2-3e9a-554d-823a-0e47253beed5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jastwin144.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jastwin144.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5309a8-5a79-5e9a-b8af-03d1ba6b4367","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jaupux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jaupux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaafb01a-8174-5da4-b578-6029a6561379","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jeepbio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jeepbio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc193d1-5df2-5415-87b6-99fa08e51534","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jerseyscouture.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jerseyscouture.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b7bb00-2a6a-5718-983e-af0a4eb66576","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbet1243.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbet1243.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf3f945-fcda-5c29-bd4d-599cd86d2c9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbetgiristr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbetgiristr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0b2d8a-ad22-53e5-8f47-6db333645eda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbetgunceltr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbetgunceltr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5def0dc-2c74-5a6d-952d-5c7b8ed044bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbetresmiguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbetresmiguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fc447e9-1856-5e31-a18f-4549f9abfdc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbetresmitr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbetresmitr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f7cbea-8478-5555-a597-02df2ca1361e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetbetyenigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetbetyenigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1f7351a-ef1a-5ca9-919f-321ae83bca92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetonia-france-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetonia-france-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e7e4622-8ecb-572e-bba0-02b7f3dabb34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jetopex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jetopex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f566ce71-5bea-56fe-a825-26a5fa73baf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43bb53ce-cf4f-5898-9e87-2852583cbe59","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jodawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jodawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fd8661-f541-553c-9b5c-465a52f41669","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: join-vaulto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'join-vaulto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfd0a018-615c-5f2e-ae11-9b70772af55d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: joincollabland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'joincollabland.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc2fd63-bf31-573f-9eee-6e8cfc190dd8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: joinvaulto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'joinvaulto.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed709eb-bdd8-5adf-af7e-f3e968c32a0a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojo-obetgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojo-obetgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fbfe720-96be-561b-a4df-4f3bdba49b3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobel1288.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobel1288.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9904985a-682f-55a4-8607-15b2bce9e02f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-2026erisiminfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-2026erisiminfo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--048292ba-9102-5a05-bd10-8d4f4687b33a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-2026orginal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-2026orginal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ace1b48-64ff-5abb-840d-f56cf4d2b525","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-bul.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-bul.vip']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0503cc74-3e96-532a-aef5-010ad4796f55","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-canli.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-canli.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0930ef-8734-509b-a3fe-7ee6bba648ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-canligiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-canligiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6934db-2aaf-568b-94bd-c88e089be0b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-combayram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-combayram.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdedbcc-c989-5869-8f6a-68d461046002","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-eguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-eguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54933d87-22ed-521e-89af-233eb5ee4687","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-giristek.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-giristek.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62d593ee-c6ba-5520-94d9-e697c8bf71b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-jojobet.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-jojobet.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--548f0529-cacd-54f5-8f83-e07791d20bc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-nextgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-nextgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51bd14c-65f6-5b62-8b35-ebee22b3d4ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-originalgirisi2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-originalgirisi2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3088ce-30bf-573a-80d3-572173d22607","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-resmitekadres.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-resmitekadres.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9395a5ef-d0ef-5ab7-aaa8-d799a52626b8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet-vipgirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet-vipgirisi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc583d22-5df5-5220-b7f5-33ed30d62af9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet.center']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82db8afb-5f9a-5625-8c2b-55f8271aa1b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet11648.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet11648.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--601c6e48-13ca-5d91-aef2-4446e356d502","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet8015.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet8015.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--751c2ce2-e06e-50ff-b95b-ce5078084b06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet8227.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet8227.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3002e0-29a5-528f-8ab1-0962199d4604","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet8227.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet8227.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9d21108-d09b-5234-bbe2-64b26e19f98d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet8379.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet8379.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99dfa118-e7c9-50f7-8952-8789105ef768","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet9132.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet9132.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf6a17fd-4d06-5e76-9207-bf1909619c0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet9930.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet9930.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa659a31-0ef9-5b65-8e97-4ab6945ad50c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet9947.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet9947.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9de5a1d-fe6e-5d85-a636-f4a8b2874962","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobet9948.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobet9948.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--202fb3f0-55f0-5aca-9441-d7803f4ad6db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetadres.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetadres.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba01121-2a5c-58f8-a92f-85f958dd00a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobeterisim2026guncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobeterisim2026guncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c831a5b-a31e-51d9-86c3-c8d2423f6193","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetgirisler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetgirisler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9206668-489a-535d-81bc-87b38a889dfd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetjojobet.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetjojobet.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c12852a-0e8a-5d23-af88-a50b27e1b8a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetl.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d92124-79db-5edb-9112-1af15bde3d2e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetozelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetozelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--358c1ece-939e-52a7-9493-32076319b207","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetsite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetsite.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1499ace4-d2a0-5a9f-b60b-b8d9b4d533f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetsiteler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetsiteler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66989ea3-3d83-57f9-a907-599ea4d76969","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobetyeni.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobetyeni.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe2ca4b-27c6-5ed4-85d9-014c64b66047","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jojobtofcal-siteler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jojobtofcal-siteler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9c2163-dcfc-59ec-912f-a7b974421acb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jpanu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jpanu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad178ba4-4c10-505e-8489-433e20e05e3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jpawe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jpawe.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b15cc8c-a738-53bd-bf8a-a87da59e0b65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jpawu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jpawu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bef973f-0a13-5139-8978-537bbacf7e43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jq6b3qtupblbr2.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jq6b3qtupblbr2.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8444be90-7f17-5827-977f-69ed2089dc1d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: juajox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'juajox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--739e684a-447b-557d-9684-a1e9cd6b0889","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: julywin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'julywin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab53ea4-389d-5545-9189-31afcc26daed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: julywins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'julywins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4287b674-5e17-5ea9-a240-700ba191a86a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: junofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'junofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2a5a93-5c6e-59f5-8536-f7621c62e344","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jupiter-ag-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jupiter-ag-swap.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa4f418f-44f8-51f1-80e8-8610bbbd29d5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: jupiter-perp.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'jupiter-perp.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f0d21c-5648-5fcc-a6f8-89a8a1848d0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: justrevealing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'justrevealing.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48488f64-855a-533c-b876-7b1c88fe65a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaecex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaecex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eed5e28-49dc-5e79-8ce1-33c4dcc2d24f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaegox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaegox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18400435-5fcd-5559-ab96-685898a2e0a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaehax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaehax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--37238c8a-3427-5463-9150-29f86a4a7118","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaezax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaezax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27961a6a-0bbb-54be-8ed8-4791a89fc7a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kagerex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kagerex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9252b44-a77a-5c95-a757-cff60c967344","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kagewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kagewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dda1c05-0163-5731-98f5-791d2bd10874","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaiyuntiyucenter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaiyuntiyucenter.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff40ca10-0122-5c42-a548-782ee80185de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kamino-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kamino-dex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacf5b0a-2eaf-56c5-82fa-55d18b7b32e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kanimex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kanimex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6f07d7-4843-516d-bff9-00c524f3406f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kanivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kanivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--186bf221-3505-5d4c-92ff-d3ebbcb34bc4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kapitalverwaltungsgesellschaft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kapitalverwaltungsgesellschaft.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d221f0a4-904f-5f2c-9b7f-5c79958ac467","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaptandenemebonuslari.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaptandenemebonuslari.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fe88ede-ed53-54fe-8f86-cfcdad647ce6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: karambwan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'karambwan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e496997b-f8d1-5382-9345-7f649bfe7a98","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: karrosburbank.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'karrosburbank.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbca451c-f670-56c5-99c7-78fe51ad07df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: karuwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'karuwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dc09c3-4583-50d3-b766-11c08614805f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a30ad1-fcfe-5364-a46b-1c4f8e1ff9d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kastwin150.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kastwin150.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62ff42a-15c2-545b-9eb0-dac1c9b34727","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: katil.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'katil.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d866ba6b-3b0d-5826-8782-4ed007eea6c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kaurux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kaurux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22daa2c-99a8-5679-a544-acaef3c7fba6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kautax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kautax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b006a9-51f8-54c7-a92d-32da0aebedcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kautux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kautux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aca55d4-8b32-59c5-a2fc-620ccffba16f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kavbet0978.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kavbet0978.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c248755-34ca-59bf-8775-bfdea7dd909f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kazancbets10vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kazancbets10vip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2f1b28-1308-52f7-a41c-84f2e33df3ce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kazewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kazewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20197d85-0296-55aa-8092-287a0208f1ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kazowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kazowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e921849-c66a-55dc-87b8-9747c43379f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: keberuntunganspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'keberuntunganspin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--842a58a7-bd61-51b1-9eb0-ada4b6700f13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kedovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kedovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42600a6b-72ed-5cf1-9392-4ae202f55f59","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kegodex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kegodex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7671e1f7-26c8-5008-b322-36fdadc683c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kemivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kemivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--552d6554-38a2-5b04-8a6c-d036ef04ec70","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kenivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kenivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d81475-a933-5fd1-b4bc-4ee56bcb820c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kenovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kenovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ea6eeb-f1df-593f-8cd4-74e9d3744d1f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kepovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kepovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c2d5bd-b25f-5f08-bfab-89bddd33d94d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: keriwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'keriwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b898602a-3977-5400-9bc0-a0400cc9d471","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: keruipeptides.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'keruipeptides.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--183fc2fc-95b1-53d6-86b5-b0e77ebbd8c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kerunox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kerunox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4ed230e-3524-553c-b4ff-011120ee0947","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kesowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kesowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c7a25c-574f-5c3a-8e8e-848eaf77d294","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ketofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ketofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7f26ec-fba9-53c9-8a4b-02802fc29122","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kevudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kevudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5bee809-ca5c-545d-8593-e79e7425e7b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kew270jo43.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kew270jo43.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--095f7132-dc07-5fcf-af8d-04148d4a14bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: keyboardgoblins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'keyboardgoblins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79726d1d-9a09-579f-9b95-ec99d5439afa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a4ef47-2fa0-5ccb-baa0-4180ec9aa14d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kfort.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kfort.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92792461-3318-571c-bbfd-c58f6dbae920","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kickgift.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kickgift.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ed5430-96c9-58ac-a7b7-a74877322374","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kickpoly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kickpoly.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79434560-daf2-590c-ae2a-c9d115e87893","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: killazbox.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'killazbox.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c7116c-375d-5e0c-b642-5ee02f059c77","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kilmainhamonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kilmainhamonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef7ad70-98bf-5af9-bcae-d0cd8eafb651","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kinggirislerim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kinggirislerim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1974472-7efe-5907-b97f-3f34b434a00a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kinggrand.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kinggrand.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc216e78-15fe-5a29-8308-c9624bbd966d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kingroyal829.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kingroyal829.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--628ea47b-d0f4-57cf-811c-dc6273f88714","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kingroyalguncelturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kingroyalguncelturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d6e8e4-c1e1-5fd9-b549-70294c56eec1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kirawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kirawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34dedc9a-6ce1-544e-8a4d-a8e8a4968850","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kitonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kitonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7cca19-9b43-57be-8922-90c52196eaa5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kitten-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kitten-swap.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ab89412-ce58-5017-b4e4-38ee02ced61f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kitten-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kitten-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09df6c1d-192b-5da9-8ce4-99f0e1072252","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kizutex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kizutex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b505a6fb-dba9-56dd-97d0-01f0125c7ce7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-2026.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-2026.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--abee8591-681c-5783-9670-d5010cff7238","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-antrag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-antrag.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78551a6f-d3a3-565a-80af-78e86b3dbef0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-antrag.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-antrag.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5dc1981-0cc9-5adc-982d-f30d7a7e42ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-at.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-at.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db6d506f-2b5e-5a70-9754-eb2ee0a9d3f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-erhalten.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-erhalten.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cf2bb6c-2604-5368-9008-3675dcd18c99","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus-erhalten.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus-erhalten.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a275540e-8872-5f16-9dd7-4edb9843d5ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: klimabonus2026.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'klimabonus2026.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c769494-d32d-57fe-8322-1be0a5e801a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kmspico.zip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kmspico.zip']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceecfc60-6aa3-5d41-9ce9-21f8ada484af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: koazox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'koazox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17716959-bfc7-5a63-a513-6f0ab1abefeb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: koesux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'koesux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--335a548b-b04a-5610-a42d-4879f5756bd5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kogamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kogamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7d3df8-020c-5af7-a09c-440c8a9a73be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kogwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kogwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b41ebadf-7c64-5a61-9370-7cdde423caf9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: koinio.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'koinio.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51352873-c201-5d44-bc02-69be1323ac65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kolixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kolixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f28622-668b-5a6a-96d4-b378de24400f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kolnplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kolnplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--203ba3e2-7dc5-5395-ac7c-a60948d0fc94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kom1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kom1.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60075b42-a5ce-56b4-9965-40dbad0c9d7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: komainu-invest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'komainu-invest.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9d6686b-cc50-5b77-b98f-eaf4b58c7105","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: komalox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'komalox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f3f0b8-dda9-5eff-9704-ebadab61c991","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kompromat1.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kompromat1.online']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--043961a9-df42-57ce-a89f-5a666fa97e14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: konawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'konawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b927fdaf-b76f-59fd-9295-ab7645d5a597","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kongographics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kongographics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88e5622-f56c-5d1e-8c2c-ad23c4a6c8f5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: konivex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'konivex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad4d60a-aa33-53ca-93b1-33df7ad999fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: koyra.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'koyra.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--647d28a0-9a0e-5824-966f-c35edc6c2c00","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab2fb0e-6754-55d9-8450-777f1288e495","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kraken-signin-session.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kraken-signin-session.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27910829-f6a2-5abb-963b-865a2b086981","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kraken-verifizierung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kraken-verifizierung.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b3ca330-9c2e-57d8-b281-f621c9234935","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krakensite1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krakensite1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b62d46-9b3f-5c5d-a7a9-fb9f21581dbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krakensite1.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krakensite1.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3180ed4d-09d4-5765-ac46-a5c0cb28583d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krakensix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krakensix.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b780a53-ab0f-57f4-b01a-73542c58635b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kralbet2154.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kralbet2154.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60afd93e-dc4f-5f2a-ba19-1a51730bcf83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krallbet2259.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krallbet2259.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e128016-0a55-509d-af69-21e642bd12c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35113327-5685-588c-8523-1fbab39bd0bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: krutoysitelogz.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'krutoysitelogz.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebf0cc58-d3ac-57ec-8d36-f12f6664b2bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kuemox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kuemox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda344e8-7bf4-59c1-9f51-d4f8282cd4be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kuofax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kuofax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e85bab6-dfb1-53c6-93ae-24e6798747ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kupi-pasport.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kupi-pasport.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a439cc06-b409-55c7-8ea7-eb204aa6ef60","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kupidex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kupidex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--48995ff0-08a3-571e-bba8-2cb1e12b4817","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kupit-yad.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kupit-yad.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--427cfa6e-81b2-52c6-9d0e-c43b52f627de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kuzawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kuzawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fb3dad-f47b-5f2b-870d-149f9c83c6e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kwgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kwgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0bec50-4724-5d5b-a4d3-e671ff307df7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: kyrbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'kyrbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a452030-7f89-5080-8280-f5a12404b966","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: labcobalt.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'labcobalt.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf75f93-855c-54b0-835e-64845aebd612","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: labsmorph.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'labsmorph.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67168f15-2229-508b-adc2-b61d9555f7fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: latitude-tx-disputes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'latitude-tx-disputes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1fbcd65-9979-51f7-b751-f714847a419e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: layer-bank.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'layer-bank.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e53fe83-126a-5388-bda3-c4cf0b1e872c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ldb7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ldb7.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f915efb1-d078-524a-84ba-1c9584198f1c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: leakshub.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'leakshub.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--160763ec-0f20-5f96-af7d-04c8c1370c5e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ledger-syncing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ledger-syncing.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f48996e-7ccc-502e-a4d6-ec64e7224917","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ledger-websupport.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ledger-websupport.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d78491ca-6173-530c-947e-f7482c14d1e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ledgerfirmware.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ledgerfirmware.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f5b0b5d-69be-5c5b-bd30-6a8c41dc659a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ledowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ledowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b25e4aa-bca4-5b12-b8b2-d23dc9d3429f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: leflashroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'leflashroyal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218c9bc1-8a28-5844-bea3-38ab7503967f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: legal-thomsonreuters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'legal-thomsonreuters.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce44f70-8196-57a0-ba9f-fe46fb37da88","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lekawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lekawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96295d48-b1b8-5b86-9e52-dd01fdf9da68","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lekowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lekowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--130a3a78-c2b7-587c-8a69-a3bcdac0c7a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: leriwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'leriwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d15c9a0-4052-5906-8409-7c63ca2c47a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: letovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'letovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9015303a-e19f-55f8-80a5-46a576cae262","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: letoxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'letoxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab45ac8a-4a5a-5b2b-90bd-87856940a05e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: libertycrestholdings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'libertycrestholdings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174ff728-b083-5113-bd8e-5c1d4b0dfa10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: librarygrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'librarygrades.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ee10f2-04e0-5653-bcdd-e67966a854bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: licenseplug.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'licenseplug.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4fd80fd-0c42-5479-b183-12e4ebf0b972","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lidovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lidovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77755c8-aea8-5345-b235-714be8ae38a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lifinity-dex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lifinity-dex.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8549bc89-41f4-520d-a44b-cfc937420b6d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lijsilvers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lijsilvers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48ae7ed-4c31-5c85-9dd2-25db5f5e0c16","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: limerenceperiscope.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'limerenceperiscope.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c994b157-c7e7-5106-b59e-b34bde6df936","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: limewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'limewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6605d86f-c002-5343-9899-bbfe2d7400a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: liminal-money.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'liminal-money.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0ef1f4-b95a-58bb-acd8-645cd96c110c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: liminalmoney.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'liminalmoney.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeebb9c6-6999-530d-951a-cd54e7150104","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lindabrinkmastellar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lindabrinkmastellar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69cfa485-07e9-5c0c-8b90-67bb9bc39dc2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: linkcasihash.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'linkcasihash.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad4d875-f89d-5e85-b75f-c9dba961c1d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: linkiniz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'linkiniz.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b452b1ff-7960-5bc6-acf9-aaf1fd23e72a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: linkler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'linkler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163dbf39-cbf0-555a-b25c-ccc2efd58f90","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: littlecaessaars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'littlecaessaars.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e195257-c34f-585a-bd06-f9de90469afe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: littleforlot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'littleforlot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89789643-d1ff-5b9d-b986-afbbbcd55ecc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: littllecaesarsusa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'littllecaesarsusa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--20954f57-c892-513d-af4c-1d9726258c13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lixwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lixwallet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7783c15-8939-587f-b3d7-e1e8f7894ffb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lizarox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lizarox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbac3eaf-b461-583a-a7e3-13041f9f34a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ljsilveers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ljsilveers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f940a1-997c-5294-93a9-8ed693f0709b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ljsilverrs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ljsilverrs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f28f86-3a87-5554-982b-09a89673d5ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ljsilverrss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ljsilverrss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6398f653-9cbc-5e6f-851e-b8baebb69fe1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ljsilverss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ljsilverss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed24631d-ab19-560c-894e-d90f410cb5b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ljslivers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ljslivers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f42f5dc-e559-5bbf-9eb7-d04a16bfdcd0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: loawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'loawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9b5a12-1d58-5eea-abd4-689be76d8bd2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: locawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'locawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ca1f71-9688-5967-aa30-b047b07dcfc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lockedcaptcha.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lockedcaptcha.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0959c431-507a-5a12-a4ab-39258127f6bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: login52884-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'login52884-coinbase.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19feafa4-876d-56db-a6f1-36d9c97fce90","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: logsecure-office.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'logsecure-office.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9fb9f1-02b3-5c2c-8083-0d3d400426bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: london-spin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'london-spin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fca5b32-b4f0-5448-a9c4-4bf20cb187ca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: londoneventsguide.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'londoneventsguide.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fcfe78-7d3c-5b30-b8af-6d9e962c2a04","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lonixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lonixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e312bdcb-f40d-536c-8df5-82365d776361","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: loop-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'loop-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11f5b33c-46a1-5ea0-b1dc-be064c1443c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: loop-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'loop-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--226cc936-d2e2-5c05-8a76-a88aef6494dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: looping-collective.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'looping-collective.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30287549-e52b-59ae-917c-c82dc322254b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: loopwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'loopwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b5616f3-1efe-54ff-93fd-e4a41f1ca69c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: loraxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'loraxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22cb7cbe-fcc2-519f-bd6f-b1ab9ddde02e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lorewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lorewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c05d93-33f0-5cf5-9b16-069cf9a1103b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lotivo.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lotivo.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a152ef82-ca60-5302-aed6-10aebbb93d83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lovegamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lovegamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3e3878-a50a-5a5e-b35b-c2f30fe5f91a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luaswap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luaswap.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c32bec-2ef6-53e6-bbde-9a0e76b898b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luckmega.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luckmega.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c397fd08-5450-5d87-b076-27f2e121c8bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luckora.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luckora.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c411c4c2-b20b-572a-a394-93671a495ee0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luckydicecasino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luckydicecasino.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f6d261-d4c7-5705-9d88-50490d5b753f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luckyempire.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luckyempire.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6257aeb5-2922-58e9-ba1c-9cff3270ca27","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luckyshoting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luckyshoting.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--825957db-cda3-5b02-87b9-bf162a768ce8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lucowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lucowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2433c81e-5bdb-5da4-895a-71ec014974e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lucywex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lucywex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1982af70-2538-5fd0-ac8f-55cada7402c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luna-proxy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luna-proxy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f14d40d-9fe7-530c-afb3-deedeee28e6c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunabet-site.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunabet-site.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80963248-2397-5b86-a6a7-f13479c1604d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunabet1512.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunabet1512.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e7cd1b-57be-5ec1-a5fa-6e97da87d210","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunabeti.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunabeti.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--022015d1-bcc9-50f2-9192-3410eda5e6c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunaland.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunaland.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18577240-4693-5aad-aba8-021934db54f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunarmex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunarmex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131a4ba3-a48d-5308-bf26-6ce3c53dd773","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunarwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunarwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0091c15-8ab0-5811-9a7d-93d054648ece","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunocasino.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunocasino.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bfa3fe-9b7f-5d66-9d6f-790ea7a9ce10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lunopex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lunopex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4c8521-10e1-5277-b738-5a4a30a28aad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luxbets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luxbets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e1f5bce-adaf-53da-9d00-3bd0eaa65573","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luxefex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luxefex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d698ac-ebd2-5137-9306-43e35cec8b45","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luxoro-sans-depot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luxoro-sans-depot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8822ed2c-a9cd-585c-b03a-517ab9274de6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luxzone.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luxzone.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9359b887-f40d-52b7-85f1-e07b8f997568","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: luzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'luzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f72b91c5-5227-5187-af29-d631568dd73b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda103.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda103.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a76fa813-d121-5af1-a12b-50a926685aa3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda105.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda105.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e045b64b-f901-59fc-8248-73af53a816ca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda106.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda106.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf0424e-826e-5ccf-8d9a-17460325396f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda108.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda108.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62953436-d951-587e-ac9f-3c98b22f4c3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda110.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda110.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0b33f6-f4aa-5913-8eb1-7a22cc59e90f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda111.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda111.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df8c699-2afd-5353-8b92-37ace5fac110","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda113.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda113.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a773a1-5ffb-5931-bea4-aff7190d7219","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda115.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda115.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce15c79d-d041-5d66-a13a-e761bcf124fd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda116.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda116.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c5716c-19f9-5eaf-af1f-ef9d089b17df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda118.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda118.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9abf860-db31-56c3-86f3-330280b1e1df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lv-b1fda120.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lv-b1fda120.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5430d158-3858-5c80-97f2-067a2bbc13fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lvhighway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lvhighway.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be137492-aafc-5db5-95dd-8f40f1d22346","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: lxchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lxchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3068866d-98fe-5e43-8ad4-52e7c1c98a6c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m-harbiwin721.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm-harbiwin721.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a17fcb-5948-5bea-8c37-91016f7682b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m-nakitbahis1115.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm-nakitbahis1115.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e92ff7-f677-58b7-97ac-8e186fc14037","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m1486bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm1486bets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6821f569-f7f4-560e-a322-3dbc5612cfe5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m2ma2gvis0l3hw.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm2ma2gvis0l3hw.cfd']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--548e75ef-219f-5448-aa7e-085038f745e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-appauth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-appauth.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--108498d4-45ad-5150-86ab-ac2dbf1fa9ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-authpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-authpage.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d32c1-00fc-5a2e-bd1c-1b7f79f73277","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-authpage.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-authpage.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b62f0f-f8b8-51d5-bcb5-96086c2f0a62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-oauth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-oauth.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da752c4e-e49c-5117-a1a2-fe1a8d7d8af2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-onlogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-onlogin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--882ce78b-b8c9-5d2f-86f1-30e211e39b66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365-pageauth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365-pageauth.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d49d738d-770d-5abd-aabb-c4edc8bbc4a6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: m365route.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'm365route.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cefa1c3-488f-50d7-a9ce-30768979ed0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ma-chance-casino1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ma-chance-casino1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56009fcf-148c-57dd-8564-432886dd1bfa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ma-chance-casino2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ma-chance-casino2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa448f65-92e3-5864-bff0-6ab5641b9663","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: macewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'macewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c72073a-752e-54e5-a019-b61a711e1d32","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: madridbet0183.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'madridbet0183.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6017e59e-8459-5aa8-95f3-0f83d36b6942","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: madridbet2285.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'madridbet2285.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad7b86b-8345-5545-b08c-924c99303c70","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: majesbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'majesbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f141945c-635b-58e9-bbf4-18702bccab1e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: makanexaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'makanexaa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a943366-2d84-5f5d-9622-d756ecbac526","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: makettodaycount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'makettodaycount.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fc25a2e-1f20-5b24-a46c-6fa950203f40","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: makiwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'makiwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55c441b-6da6-54e2-afc3-b8df81fc860d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mallobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mallobet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d29011-5191-5c31-aeac-a1dc7f3cd6e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: malt-bahis-girisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'malt-bahis-girisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e657e6ce-487f-54af-ae06-e0d1d7ec5b51","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: manage-firmware.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'manage-firmware.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2febe4-02cf-5b44-aa8f-223f2d889548","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: manage-firmware.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'manage-firmware.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff978110-5040-5ecd-bc9f-675a0205adf9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: manage-operations.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'manage-operations.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cc2618-6646-5213-a449-9d3b82904a3b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: managemydhl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'managemydhl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a288780-6821-565f-8439-b098159d1b11","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: manewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'manewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf6a774-46ed-5588-b1dc-12a24e23b8b8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mantle-bridge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mantle-bridge.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc8d8f2-0859-5fc6-b1e8-c09214f772a6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marketcreditglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marketcreditglobal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6caa7743-2ad8-5319-994a-bb39b12c6b4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marrcopizza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marrcopizza.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bebaad0-3a8f-5e82-991b-beca37488c54","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsbahis-egirisi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsbahis-egirisi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--258559db-900b-5c74-84ff-d63660862106","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsbahis11334.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsbahis11334.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f9652d-6859-57a0-b353-b5122c55c67f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsbahis1982.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsbahis1982.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9a5ea38-61df-506a-8a24-086fec495903","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsbahisl079.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsbahisl079.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5032aa-2148-5814-80b2-ff04a25886ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsodex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsodex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e961c89e-605f-5c6d-87e8-d4d6ad78f21c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: marsowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'marsowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70250a36-aebc-5db3-acc5-79acd8a3fbef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: maruwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'maruwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30136731-d137-5252-8403-7258ee220bc9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: masowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'masowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c56566-fae3-5cab-ae8e-ac5baba78755","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: matbetgirisi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'matbetgirisi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5aa744-b5f6-57c4-97f7-795f94772e38","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: matbetgirisim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'matbetgirisim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79eebdf0-cefc-5b3f-82bd-1c8f879d554f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: matbetgirisin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'matbetgirisin.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5cb2008-0d97-51e6-8f18-3a6c7ff53356","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: maxbeast.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'maxbeast.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1458b5c3-ceb1-5408-a683-1986a1d87675","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: maxdice.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'maxdice.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--301ea1e1-360c-5af9-bf34-caa4c21ec90c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: maxospins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'maxospins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--854fc699-da27-5ad2-95f3-0d8b861475ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: maxroll.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'maxroll.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebb4740-2078-5194-9efe-9d760ebde2a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1778.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1778.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b7ae858-3ced-5df9-b007-0a76efadbad2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1782.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1782.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de07a052-3c4e-534d-bf82-cd15f16105d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1787.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1787.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d7cafa8-681f-5099-9f9b-10e56a35f600","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1788.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1788.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--382015ad-f371-51d6-aec3-f27c6b716796","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1792.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1792.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b02c108-cdc8-5e64-a4e2-c54ed958755a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1793.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1793.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a73614f8-96b5-55f2-8c1b-4bfb088fdce1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1794.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1794.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbbffd6-00df-5e58-a913-765b26462499","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1796.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1796.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4e6cdd-9448-5970-b3ef-d24494a66e6d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1798.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1798.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f042ebd1-3904-5a51-af67-2cf3088a6deb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1822.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1822.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fcf7a15-2831-59f2-9ef6-e2d0e73446dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1862.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1862.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ef8841-f9c1-5591-81cc-12704655e80a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1873.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1873.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--455bc989-fe1d-5fac-bd61-00ec27e64ff0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetist1878.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetist1878.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39d85c81-0e32-534e-8cf0-bb1bf6470918","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mbetturkey4206.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mbetturkey4206.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a186db0-c64a-5589-b533-534717386486","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: md28ta2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'md28ta2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--767e76a0-ab56-557e-959d-3091c7b834d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mebedex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mebedex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d9e1e6-1bbe-58fc-b53b-5ab5d1bfc6bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mebelbistro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mebelbistro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89252f0b-e1bd-59ff-b20e-91608095b339","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: medsinga.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'medsinga.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f98738f1-ce21-5db9-b317-163e7bd323aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mega-duel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mega-duel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d5eb4d-bfe9-5d3c-aaa0-4599e2d72f30","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mekopex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mekopex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc2b47c-088f-5120-bc7c-ec260c2593b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mellonecas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mellonecas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75c42b0-8c2e-55b4-a87e-ccfd56628a47","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: memowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'memowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--814474da-df98-5b49-b1c3-d414213e6e9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: menowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'menowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97355008-021b-52b5-a846-015636923479","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meohox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meohox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba36c4c-3134-5653-8bc9-788e068d5d34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meopex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meopex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d145eb-7260-5846-be64-877abe834d08","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mercurecasino839.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mercurecasino839.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6050c713-8dc8-5adc-bd6a-329f446a2820","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mercurecasinohadi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mercurecasinohadi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb08ef6c-f041-57e5-a079-640566bb0472","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mercusweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mercusweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c89a8ce-1516-5c65-99b1-9080ec43d265","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merit-kingonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merit-kingonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305f604c-279a-5889-ab3b-707c2d55ac0a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merit-kingoyun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merit-kingoyun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc276548-00ec-557d-95fb-d183a184898d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-turkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-turkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d22ac3-90dc-511b-878e-4af74a773ab6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-xyzguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-xyzguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50797133-8cb6-5113-9293-c56ac2e27bdb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-xyzresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-xyzresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08740bf-13c4-5982-b505-6421f9e11a88","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-xyztr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-xyztr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cfb0b8-8449-51af-bd74-e042b5f5a95e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-xyzyenigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-xyzyenigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6944e424-501c-5c36-97fa-2a5e1e2826ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet-yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet-yeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af9f5e3-dbe6-58fb-ab01-d17729d91469","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet774.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet774.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2c19bd-0dc9-57b7-896f-d1b9e7f01ece","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet785.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet785.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5afdc917-aa0c-511a-93de-7504a222f378","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet789.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet789.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb17d332-7abe-5b97-9647-fdd19f1a1ad8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet798.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet798.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bdda28f-8ac5-573f-8c68-dac4949a463f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet799.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet799.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6032bf1-f1af-5a61-8c98-7cd841a8a6bc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet963.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet963.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4daaf6f-81fc-57c6-a1c8-a5696a8dae61","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbet984.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbet984.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--688ac357-65f8-57f3-ba7e-4c5cea504e14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetadresgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetadresgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ad894a-f67a-5629-b105-6a3e2787f0f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetadresturkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetadresturkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd87587-9323-5c7b-bfdd-7196c0779f0e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetgir-xyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetgir-xyz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567c98fe-1ecf-5729-8a75-ed6f2218ba70","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetgirxyz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetgirxyz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e81ca49e-bc23-5691-b0e9-c9b3d3f42adf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetguncelresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetguncelresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--113d1345-bb53-5d1e-9cf6-1425c561bd09","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetguncelturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetguncelturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8dcb7d-bc0c-53f7-8e9b-b006834ba096","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetguncelyeniadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetguncelyeniadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e18da801-8f42-5a28-8223-156027d7f492","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetguvenliturkiyeadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetguvenliturkiyeadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22109a8b-1969-5245-bdcc-4d0556bdc6dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetguvenliturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetguvenliturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97dfbe94-ef5c-5c10-a9f0-a893d7467ec3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetresmigir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetresmigir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf340d12-cd98-5dd6-97aa-22257c17c99a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetresmigunceladres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetresmigunceladres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b155f6e-c99f-56f4-815a-185e955667e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetresmiguncelturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetresmiguncelturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e087637-560a-5dca-9627-f39cdf730d1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetresmiturkiyeadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetresmiturkiyeadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf1bd43-cee8-5d22-ab9b-6beff0cc7426","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetresmiturkiyegirisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetresmiturkiyegirisadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa751e73-804a-595b-b4a7-81e9e59755a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbettrgir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbettrgir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9d0c17-c554-5518-9eb7-a4376a7c621a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetturkiyeguncelresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetturkiyeguncelresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b23e976e-4a53-58e3-9075-eab50074e29b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetturkiyeresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetturkiyeresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae1fcd2-d51c-52b4-9744-7f0e62fb8188","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetturkiyeresmigirisadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetturkiyeresmigirisadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--176c90bb-8251-5545-be4b-b336d2ff65c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetturkiyeresmigunceladres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetturkiyeresmigunceladres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ccd2ab-ef55-5abe-a24a-e2d26ecff146","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetvipadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetvipadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d1bf3f7-94a0-515e-9925-4253560fd64f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetxyz-giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetxyz-giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d38fd29c-ec64-573c-8233-1108ef3f098b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetxyz-turkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetxyz-turkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d15640b8-8295-50d4-9433-21fd1984e3db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetxyz-yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetxyz-yeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d18d3993-ea7a-59a8-82c1-a43f123eb293","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniguncelturkiyeadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniguncelturkiyeadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d2ed9f-cb49-5178-88e1-6dea0ca7973a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniguncelturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniguncelturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda67c46-77b9-53b8-8af9-6a103aafd30f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniresmiguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniresmiguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fceed28-58e6-578c-a869-ce58c653a0d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ae1916e-8a41-59fb-bc7c-a1c1f321cd57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniturkiyegunceladres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniturkiyegunceladres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88b8ac3-a091-57ef-8717-cf01449ad1ca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniturkiyeguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniturkiyeguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7049e739-65fe-5e81-bb0e-17078c27c9fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritbetyeniturkiyeresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritbetyeniturkiyeresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1519fd9e-c94f-522c-96cc-edce0d86b4d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-724aktif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-724aktif.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85167369-48e1-5ff3-9b46-5ecfb0647432","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-appgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-appgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a226969c-a2aa-5421-83b0-f0238c5b5540","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-casinogiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-casinogiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca41b61-9fbe-5455-9689-2f7e087454d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-dunya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-dunya.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edca87c4-b0ee-5781-9674-c5ec3b8a72c2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-girisadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-girisadresi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4033ff90-b509-5b62-a82d-fe99b123435e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-gizligiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-gizligiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9620954-7280-528f-95d7-2ba058e514ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-globalerisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-globalerisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a2d88f5-0821-58db-b5a8-16b416726753","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-guvenligir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-guvenligir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4383c18d-4eb1-5cad-9c36-143e4afc70d5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-hemenulas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-hemenulas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc44a59-9983-5f42-a30b-016b69bbfdc5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-hizliadres.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-hizliadres.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e78659-0523-5ec1-8e2e-15c63aca4d65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-kingadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-kingadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa17c9f6-4c6b-557a-b729-2869a438fc73","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-kraloyunlar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-kraloyunlar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b460ba97-b64a-5f4d-b7e1-ee6b58c7b8e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-live.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d37676a-1de6-57f7-9815-50313961149e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-money.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-money.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3287bea-951b-5c7f-ab73-235303558a51","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-officialadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-officialadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c0f99f3-7fcc-5251-b26c-73e9dfbce89a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-original.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-original.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57fb5a24-c88b-55e8-8b7e-f7e9fbe49246","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-orjbetgir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-orjbetgir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--529086e9-2e56-5425-b18d-1bb4a671bbbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-orjinalapi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-orjinalapi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8b06fc-4c14-5348-8922-c4e6477d96f6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-progiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-progiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e97b1120-b176-59fc-bb65-80bcedba35e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-resmierisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-resmierisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ef49060-7a1c-5e85-b99b-5c248227d5e1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-resminiz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-resminiz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2efb321a-9d1c-56be-9867-4bff9b9df250","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-serigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-serigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b873de1f-ad7d-5aca-bd4e-03ed0a60f1ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-sitegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-sitegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ec97613-a36e-5fe2-a2b5-080743aea7c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-sports.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-sports.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419deeb8-2888-55ef-871b-8bdb46e5b25b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-tekcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-tekcasino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5aeca0-5588-5c93-8ee3-0dfc741bf4fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-tekguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-tekguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afabdc03-be15-5775-9d9d-ab68fb2a832b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-trgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-trgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82823e68-41f3-5978-ac6b-73237227f10f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-ulasimadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-ulasimadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb0a8cf-a905-52a4-8417-e143c3d8b9c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-viperisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-viperisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d171da6a-451b-5b7d-bb46-7017e26bce95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-vipglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-vipglobal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3bc4c1-a778-5cba-bd87-e707bf1faeb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-vippremium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-vippremium.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea974fcf-cb94-5b85-8d71-abd89f50c5b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking-winkazanc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking-winkazanc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5bcb79d-6ef0-57c2-bc28-f1671cca790d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking3215.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking3215.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0517d80d-592a-582d-bd6d-d822f11765e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking3281.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking3281.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cdd1ea8-8ea4-5ee1-97d3-307506737c7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking3345.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking3345.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f3e568-f4e0-59d5-9fc9-a881461bbd1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking3421.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking3421.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e66f83-669f-5bb8-9b7a-cdc39951b9b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4276.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4276.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec774b2-bf95-546d-97b9-95625d182f9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4356.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4356.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66424222-d7cb-5929-b6e3-28b0ed658e3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4465.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4465.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf214a7e-e765-52c1-8169-bd663185e41a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4576.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4576.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1166b6-5d53-5d4b-990d-414076d3a699","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4676.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4676.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9051e1a-4373-56b9-8f6f-2fddcaaebb0f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4865.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4865.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ebd39a3-ef6f-5326-97df-dd5d9b793bf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking4876.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking4876.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79f85cb-5e0d-5e60-a108-dacee8300fcd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50020.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50020.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35258d2-34ad-5dd7-a55f-9c300f8a5a6e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50030.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50030.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a172d7e6-ba33-5526-99d3-853171086c76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50035.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50035.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39344794-c3ce-56d5-9a23-38c9b12c38c2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50045.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50045.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8958c68f-053d-54ff-b2f0-1ce18b2070c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50050.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50050.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d8d0b2-5c58-5fd0-bfef-61a658c7859b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50055.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50055.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02334c68-6ec3-5a64-b976-3a3e2414248c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritking50060.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritking50060.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0af44c7-96d4-51f6-96de-9e42b4de67d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritkingden.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritkingden.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d9ce9f-c825-5c6b-866c-dc2d901d3034","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritkingeulas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritkingeulas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad370ae-0f6e-54bd-8719-9d88dc4d3c32","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritkingguncelresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritkingguncelresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a17842-4119-5c2c-86ff-0f9bbc34b390","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritkingyeniguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritkingyeniguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--359c7072-aa5d-54e3-93e3-61f1ca30a2b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritkking-yasaklanmayan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritkking-yasaklanmayan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--68076600-e1db-559f-a8f1-f361966c49c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritt-kingoyunlar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritt-kingoyunlar.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69ab176d-57d7-56b8-bfba-7d04928d2d3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritt-oyunlarresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritt-oyunlarresmi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2ef940-33f9-5def-b090-6ea9e261e7cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merittking-girisadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merittking-girisadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--525047a8-1a2e-5b7d-9c3f-bc88c65ce16b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merittking-oyunlaresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merittking-oyunlaresmi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87edcb89-d822-5cd8-9cd3-da47be17ad24","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merittking-oyunlarresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merittking-oyunlarresmi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f41da3e-97da-52d5-987e-ca5a13e55977","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merittking-oyunlartek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merittking-oyunlartek.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e8b54b2-1000-5cc7-b07d-221baa517df9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: merittking-yeniadresi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'merittking-yeniadresi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dde3ede5-4dc3-521d-819f-5c073a14aae1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meritttking-oyunlartek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meritttking-oyunlartek.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1912e4c-44f3-507e-ae14-fb02120eca88","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mescaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mescaz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbaffd8e-42bb-5031-bc60-94bcffa622d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meshurbaklava.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meshurbaklava.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5277618-a00d-5387-9d51-5c0e78874d63","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metadao-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metadao-dex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22359bd7-b513-5d9a-889c-b26e3dfa22c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metadao-dex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metadao-dex.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba320440-3012-573f-9dea-21bfe7d39fe7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metagamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metagamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--266bd5b5-7845-54c9-a82c-1d72ed0db7ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meth-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meth-protocol.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65e72b6-b9af-5995-bc95-00d9a9538beb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metronidazole-flagylantibiotic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metronidazole-flagylantibiotic.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8785bdc4-4cd9-5bf5-a5c2-1b730fb57abf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metronidazolebuyflagyl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metronidazolebuyflagyl.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd62a7e9-4ee0-57aa-b326-d792bafb8809","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metronidazoleflagyl500mg.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metronidazoleflagyl500mg.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f59e850-7d31-541b-b737-3e6431a93f97","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: metronidazoleonlineflagyl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'metronidazoleonlineflagyl.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cfe4f1-2387-5042-915f-93272490ccc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meucax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meucax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb9e43a-54fe-5807-84fa-9da6ae4ba752","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mexawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mexawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d604fabc-bdc2-5f61-acdd-20c3784fdee6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mexicofinancialaid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mexicofinancialaid.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc819829-4586-586e-8ae1-40bc1d4245cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meyawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meyawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--074ce2de-c70c-5a53-9c9c-8223fd7f0312","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: meydan-renewals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'meydan-renewals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2452c13f-e6de-582e-889d-40ab7e1bc59a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mezorex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mezorex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81ea07d-be2d-5011-8228-77b6e81d297f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: microsoft-security-update.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'microsoft-security-update.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcb405f-df25-53a6-8f3a-127333d9b970","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: midasdep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'midasdep.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c95eda3-d6a1-5502-abcd-138ed7007b9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mienplays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mienplays.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b47d9e5-286f-5018-8f05-858a9a23ee62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: miga26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'miga26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7f7a64-9699-59a1-9234-02b06464c4bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: minagex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'minagex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c08b437-3af8-5825-a5a9-91360237f0cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: minneapolisseor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'minneapolisseor.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35469988-6735-5373-82f7-b5e8939576fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mislibet-kazangit.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mislibet-kazangit.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dbf2926-6c6b-5fa7-a84b-6b278f3dd126","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mitolyn-up.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mitolyn-up.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c970e8f4-5e23-562b-a966-39233ff08d4b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mixeromixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mixeromixer.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306532f6-1ae8-56d3-8c97-044be993a51a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mkavbet986.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mkavbet986.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--59502156-68df-544f-8140-6ec641ea2452","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mlntesa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mlntesa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc748bd6-0966-5d4b-bcd6-217140cbfb52","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mnakitbahis1113.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mnakitbahis1113.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--805a38cf-81a3-52ff-8e40-139f10ea4e4c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mnakitbahis1117.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mnakitbahis1117.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bca19d3-e986-5c64-8d94-76f686cfde93","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mnakitbahis1118.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mnakitbahis1118.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db22a45b-2cc6-549f-a956-e28494e4b564","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mobilbets.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mobilbets.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd96a55b-8f14-585e-810e-3b0a929901c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mobile-bets10vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mobile-bets10vip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab59540b-e251-5447-936b-33f9251bfa27","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modacherub.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modacherub.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93445e93-00ca-5351-bb29-a2396abe5e3b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2620f2c0-0acb-52e1-9732-8a19d530751c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinil-australia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinil-australia.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4334c21-ac42-5b27-b89f-beb606e44adc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinil-buy-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinil-buy-online.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c6f9f2-41b8-580e-b616-66a064b0dcf0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinil-kaufen-deutschland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinil-kaufen-deutschland.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c085f9-d151-5c0d-86a5-0c656245a208","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinil-usa.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinil-usa.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b478ac47-dd1b-5cf1-b645-e80b7a1b0fac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinilcat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinilcat.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1024a6-9ef8-5b6e-b15c-de849271da06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafiniljapan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafiniljapan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05710e5-bc0d-522a-bb54-eb4ff0babfe5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinilswitzerland.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinilswitzerland.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52b71093-12a5-5a56-add1-72d4d496e942","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modafinilxl.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modafinilxl.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49204e57-f9f3-5e72-bab3-70d4caa2c455","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modapharma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modapharma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed2a326-fb56-556d-b96a-4b2e8c69a701","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modapharma.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modapharma.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb2f2a7-a9f0-5192-b14a-d56c3fc75fa3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modaxl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modaxl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d86c4fe-54a9-5075-8be5-f28e0b633f76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: model-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'model-access.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e6bdef-3311-592c-b3f6-c796baa5d75a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: modewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'modewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4fcf55-1cc5-5e12-9846-62fb32c16284","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: moesax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'moesax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e130c7-8db9-5228-9692-b056720c2b6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mofewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mofewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6118a635-f120-58b5-a7cd-10bddf777231","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mokemeibiotechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mokemeibiotechnology.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--818d1c30-31e2-5fc1-8718-1805e4d0e4e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: moneybets10gir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'moneybets10gir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d361274b-5359-5f78-92ec-1b0e8173614e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: monsupport-td.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'monsupport-td.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90454df-89a3-58b8-b172-a07609752aa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: monvestacapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'monvestacapital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4b4450-536c-5787-8c9e-fb36a6737ae3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: morawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'morawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f55bbaf-a209-5be3-904d-ef7d5ab90a43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: moreforce.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'moreforce.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f7efe4-23ee-5eea-946d-306d950d9315","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: moscowusdt.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'moscowusdt.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21be549c-5ee2-5db1-8f82-7ed4dabb00bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mostbetskg.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mostbetskg.buzz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06df0e2f-7109-540c-b67c-b17abbbadd53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: move-giris.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'move-giris.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51b12c67-8853-5a70-8929-3aad2b6908fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: move-site.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'move-site.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e35e62-c43c-518d-92cb-f9619c369e1b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: move-site.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'move-site.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9808f040-2856-537b-a3cc-393de5388601","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30728413-44ef-58ff-836e-17ab2077304c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mperabet1249.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mperabet1249.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28bc3154-e496-5a29-8d10-572120c96713","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mpusulabet1129.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mpusulabet1129.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7426d8f6-7307-589e-a6b8-ba5ca656c85f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mpusulabet1420.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mpusulabet1420.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89016fa-342e-5142-8a66-374ed129212e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mpusulabet1522.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mpusulabet1522.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea6bb0f-863d-5479-81b9-846b664381bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mpusulabet1527.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mpusulabet1527.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70419728-bfb7-5d80-9633-53c36fc90469","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mriking5020.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mriking5020.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--512969ae-48d2-5f66-be02-92d0c4b0347a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrking-girisler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrking-girisler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d5da19-06ee-5613-8539-541fe87e41b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrking-global.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrking-global.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08292faa-0221-5c3c-ae98-6531f63ab353","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrking-resmitek.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrking-resmitek.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b082144f-6eb9-5984-b7c3-24b9c13e3591","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrking-tekguncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrking-tekguncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62d88894-2859-52c0-945d-69141ac486d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrking-yenigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrking-yenigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e8ed110-72e5-5d61-96c1-bbe292216483","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrkingden.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrkingden.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--094ab7c6-938f-53a1-b7a5-177e83a39500","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrkingguncelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrkingguncelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dda6db8-aa86-5327-b5cc-e7e44aab87b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mrkingresmiadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mrkingresmiadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa63423b-a8ce-5e5b-a447-17715465faf2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msahabet1448.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msahabet1448.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8151395c-241d-57a5-bcae-e1a6b0a3a53d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msahabet1474.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msahabet1474.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7722cee0-5715-549c-b465-c356d925981b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msahabet1475.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msahabet1475.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0e724e-2a7a-5dc8-a9ab-3ccd54418259","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msahabet1485.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msahabet1485.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001d3d09-c099-55ce-9d90-34c555fa7490","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msedgewebview5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msedgewebview5.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd5041e8-497e-575e-89c0-92748da7fe99","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msedgewebview7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msedgewebview7.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06599148-0784-5977-a8b8-ef4c0746246e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: msonbahis554.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'msonbahis554.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcb5aa7-9a96-5ed3-b3d0-4995531e585f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mtdrtek2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mtdrtek2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcbd837c-5314-5ca0-a209-54013fde19b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mtipobet7141.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mtipobet7141.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b8626c-3850-5c19-8baf-e3f8b86cc915","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mtipobet7167.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mtipobet7167.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5c1e08f-61bb-5375-b0ba-5b14299480b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: muesex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'muesex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0caf393-b110-508d-bb81-180bf9b525dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: multiaccsroblox.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'multiaccsroblox.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f808a81-701c-50f4-88dc-76d889474117","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: multsend.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'multsend.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77981a38-d0e7-5a21-9a68-b918fee94c67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: munewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'munewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9242d662-79a1-5751-974f-38ddec2d253e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: munovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'munovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7458fc76-a67b-5943-967f-38a6e84831a6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: muocux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'muocux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16709105-1ac3-5f70-94cd-1695cd11caae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: muzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'muzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--439c7bcf-aace-5546-a7f6-291af87081e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: my-packagefromfedex122.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'my-packagefromfedex122.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb3dcd8-771c-53a7-8a38-e02f84e6abd2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myaccountdpus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myaccountdpus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--347db01f-d19b-5690-8c36-2b479881eb58","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mychosenrealm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mychosenrealm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b1396b-dd3f-5dda-ba70-fb3552a35c95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mycodingtoolsd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mycodingtoolsd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64bc5d5d-1b88-51e1-bdf3-068d93ab810f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mycra0724.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mycra0724.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad28cdf4-8372-53f5-8026-4e395467c79e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mydeliveryfromfedex101.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mydeliveryfromfedex101.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d32b6-a4cc-5bf4-80ad-f9efd806ffe0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myetizolam.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myetizolam.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8178a09b-1bf7-5649-826a-8ca99914e5d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexcorrection209.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexcorrection209.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55badde5-5705-57ed-849f-2cafbf2e7104","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexinc390.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexinc390.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d8cac7-69f2-552e-acb3-5c0cb642fd76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexpostinc001ca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexpostinc001ca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c202dee-1cd2-5f91-ad79-e652e422e330","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexpostinc001qc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexpostinc001qc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b309e4a-2998-59fb-884d-fd2debf43238","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexpostinc1225.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexpostinc1225.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--18085413-9b4d-52c9-a8dd-9f70a4d8061e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexpostinc5221.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexpostinc5221.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d399254c-28fa-5bc0-b389-7f709209d3fc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myfedexpostinc6737.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myfedexpostinc6737.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06984090-627e-5933-a960-5af74d3a0065","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myhackbox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myhackbox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c59eb2-313f-5e61-9a32-aa4e3158375a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: myhongkongpharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'myhongkongpharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98352e96-d968-5d3f-a3f0-cc82c6f91136","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mymodvigil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mymodvigil.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a817189e-b3fe-5577-a5c6-b8ee6cb28d4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mysteps-cibc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mysteps-cibc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08937d9-9b66-5fb6-ace4-9cb09254703a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mytdonlinesupport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mytdonlinesupport.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c63ff-5706-5502-8acf-b27e86c8a69f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mywavepharma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mywavepharma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4389504-b6bc-5161-85ff-3bfb34151d00","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: mzirvebet332.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'mzirvebet332.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6639d2bb-409a-5b60-a416-07addfc77c41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nabla-finance.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nabla-finance.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b30e24-8c12-5a13-a7ae-cdb6daaafb7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: naegox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'naegox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa8fa59-f00e-58ab-83d6-2670cf18022c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nakadex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nakadex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--beff6479-0eb2-5478-981f-412e43494a1f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nakitbahis-viperisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nakitbahis-viperisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f5704f-32cd-5820-9d9c-c7c172ad820a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nakowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nakowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4f3e22-1f35-59bb-9329-3b5582cb2c8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nanofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nanofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--894631ba-c61d-5f3c-ae58-f93fe8805e54","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: naopux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'naopux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ea0f0a9-dded-5984-b7db-98fa10ecac2d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: narafex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'narafex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5dee00-3dce-5b8c-8133-704179edef33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nardep24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nardep24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd4c594-863e-5b8b-bf08-871a27eceeb1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nasjpvs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nasjpvs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d04216e-638f-5bc1-9156-5bd014305c8e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nationalbank-onlineweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nationalbank-onlineweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f11d785d-8aa8-5f49-83ea-58c246d24dff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nationalparkofcolorado.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nationalparkofcolorado.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ee85ef-1e80-575b-9769-d274dd746b62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: natiosecurisation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'natiosecurisation.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7151eda9-9528-5bd9-af77-85b5ff70a3ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: navifex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'navifex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb48a535-bfa5-59d1-bfc2-172b126c7dab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ndgambler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ndgambler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--016d0051-b3c4-50c7-bc20-ee2fd8454f56","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ndgambler.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ndgambler.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f57585ce-971a-58b3-b34f-4d40e99f1c6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: near-intents.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'near-intents.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50bfd5d6-8a36-5694-9981-1859ff67b443","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neazax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neazax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32ea81b5-6265-5a35-99c9-3408035da181","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nebetex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nebetex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c033e809-bf3c-531c-a786-271d49640f7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nedorex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nedorex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--218ce4e9-8ddf-5d2a-98e0-2dc1b0d0f1a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nedovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nedovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e032d49c-c709-5a15-8ede-f9e09f9b32ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neforesupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neforesupdate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88078ca7-284e-582f-b46b-48c3164832d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nehirtobacco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nehirtobacco.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aedf2f-f54c-5234-a5c7-7af4f9f8853a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nembutalsouthafrica.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nembutalsouthafrica.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98188a79-c45f-5577-96ed-59dd898542fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nemudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nemudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c991059b-c279-5777-a3a2-af08d1738611","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nemufex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nemufex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7c6598-f791-5610-89f5-8222b700ed62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nemuvex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nemuvex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb17011-48bf-554e-ad97-22b9481c28c8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nensen.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nensen.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02af6095-ef2e-5231-9285-7380d7dc7d0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nensen.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nensen.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f228eac-16c7-5f2d-9eb0-bd300a36b813","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neowin.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neowin.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--944ec64e-9c48-5f35-9f2d-6075749f4dbf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nepomex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nepomex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65944860-e4e3-59e3-b016-266b73af1baa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nepowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nepowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ac65ef-a5a9-5614-a195-91a925b1ee6e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nerdsonsite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nerdsonsite.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7767872d-6673-53b8-93e3-339debdef088","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgiris1.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgiris1.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bde8cd-ef39-5c00-a94e-26612ff57b33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgirisi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgirisi.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb92412-2076-574c-9d49-d9ee89398373","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgirisi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgirisi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae8283a6-0003-5aae-a558-38ad8daff989","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgirisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgirisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82326d6b-9ea3-5e67-a803-9a2b61b61edf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgirisim.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgirisim.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c324a3-eb8b-5291-8a6e-ab104a394b9c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisgirisleri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisgirisleri.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef4c470-1133-5deb-9ca4-0d5fcc5e8cc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisguncelgiris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisguncelgiris.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e9189b-9a96-5f9b-89f5-480f8f2ac841","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahissgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahissgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cf57fa4-ad41-50fa-b452-659058e95d9a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahissgiris2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahissgiris2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c67e696-ab4d-5d25-808f-f3f1be708b6f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahisshemengir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahisshemengir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30f42d9a-386a-5b03-9578-47b91d4d0c68","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahissyenigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahissyenigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdee4d8-0745-5c49-948c-1ac5ea132d08","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahistrresmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahistrresmi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--174797b5-741e-56d8-ace7-a22c2b56249c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neredebahistrresmi2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neredebahistrresmi2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--431d2078-9ee2-5d0d-9358-5fb1e305ab07","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nerudex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nerudex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8581b1d9-cebc-551c-8238-1eddeab0cef9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nerufex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nerufex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e008c1-04d6-5768-9039-7d2177d6d730","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nesowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nesowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--669f8e87-cebc-55c9-91f6-92af523c6599","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: net-rabbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'net-rabbit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e6244a-2137-5a10-9e5f-7f31d4fd8ec7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: netflixcore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'netflixcore.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91aa2e3e-a459-5ffc-b2d4-d1aec8be3b11","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: netorex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'netorex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee0d827-8985-5035-b45a-c5bb4e462f84","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: network-access.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'network-access.systems']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab5714fb-a9e5-5fc9-b31f-e0eef9d4b94a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: networkv2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'networkv2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d36c74e-5d0a-54fa-9d20-4c810bd2de3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neugox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neugox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5477b04f-65e4-52a9-b39c-cf51587a6338","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: neuropeakcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'neuropeakcapital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1704e7-09e6-563d-8285-795efb094a84","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: newtexcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'newtexcapital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ba2b47-41ce-5841-8778-da46c6901981","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nexik.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nexik.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1029f0-5d06-5131-a1e5-ac694ebdf2f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nextpgh3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nextpgh3.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb67b8ed-315f-51ea-b332-b00ed2fd4839","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nextrade26.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nextrade26.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19e0175a-6abd-5041-bebf-802c28d1928a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nexus-mutual.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nexus-mutual.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd1bfd0-2c33-5c81-b252-a7086f92987f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nexus-mutual.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nexus-mutual.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d913610d-2e1e-5c55-8167-8d2a76831633","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nexuslinkdarknet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nexuslinkdarknet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fab467-1a81-5954-8fd6-af35fbd82354","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nexuslogic43.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nexuslogic43.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d15a25-960d-5580-9ebb-50142d888c69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nezorex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nezorex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeac5b40-ca94-5470-8cda-f1be0f34f721","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nezwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nezwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e685142-7553-57fd-b81e-1994664bd01d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ngsbahisaffiliate.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ngsbahisaffiliate.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e371c3-eec9-5868-b385-eb0d201557f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ngsbahishizli.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ngsbahishizli.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda889af-64e4-503d-ad70-82824f9b9602","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ngsbahishizligir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ngsbahishizligir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa15d476-0e3e-59aa-9aa1-09e38e336f16","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nhgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nhgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c24dc1-be13-5958-9d75-62a7586fb14c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nicexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nicexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c96dc44-cc1b-5f17-a77a-ff217623780e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nlb-verifikacija.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nlb-verifikacija.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8688bb-3b29-5c7a-8857-7907c91e6f38","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nnvjdkaqss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nnvjdkaqss.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dc7f73f-8409-587d-88de-c5a3ea701fb2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: noccor.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'noccor.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e56369-c187-5c9f-a588-5bbe0826e005","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: node54group.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'node54group.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc75799d-7007-57de-a88e-a29d7623da06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: noecux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'noecux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949e0402-a259-5c99-a779-2f07ccc92a45","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nokiwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nokiwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f26b9e-97f3-5d16-9741-ae1f7722b0c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nolandircs.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nolandircs.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--536b9fe9-fa3c-5bca-913d-22923c168ebd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nolixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nolixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca93678f-bf27-5e13-a874-9cbfd9536e27","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: norifex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'norifex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da56947-eae2-5163-ba76-5a74e7f5901b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: northernstarfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'northernstarfinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89af158d-a2d2-58be-b8d6-b9b014baaef7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nortonosefulbrght.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nortonosefulbrght.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a87067-ce07-5f21-b77d-809719bea1c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: noswin152.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'noswin152.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11645c79-7fd5-54a6-9e61-3854c586b0b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: notgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'notgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfa0431-c539-5afe-b5f2-c486cff5b70b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: novaxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'novaxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee158575-5bb3-5261-9043-f387e901af5f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331c22cb-8958-5e57-a105-9eac1d321fd9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nozewin197.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nozewin197.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89c2f59-86c9-5f7e-b284-c41bd5cbbcf1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuabax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuabax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--835dc292-ff5c-5bde-8385-562269fd4987","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuasax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuasax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1faf868b-1d83-59ea-919c-eb7523bef1af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuefax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuefax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9d7b9e-7327-56fa-a89b-230c615062a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuemex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuemex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d01799-3b5a-5f43-b252-ccedde85ddd2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nullgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nullgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf0ba4e-296a-5b08-a7bf-8f57e89905f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: numowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'numowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da88dcc-9d95-53da-931d-894dc806e06e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuotox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuotox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf87b09-80c2-5f19-b56f-22cb61d8408a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuozex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuozex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f88c9fa-8417-5af5-868e-b24b7e018c77","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nustwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nustwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd73e06-3dde-5fc1-8fc5-32cbfdce98a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nutowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nutowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f35fb69-3f35-5bd3-8daf-2134ad65a1ce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nuzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nuzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54266b44-61ac-52ee-9342-d0a972f3acd6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nv-casino3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nv-casino3.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e45085-2999-5471-960b-fe2e0df218d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nxt40egqdz3nkf.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nxt40egqdz3nkf.bond']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cc7f69-8c5b-5a94-9b95-e35baec844c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nyrailmacphailcairn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nyrailmacphailcairn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca0d600-02d1-535b-9bf2-7db0d758bfd7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: nyzaron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'nyzaron.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a896f99-14e5-5d74-b3d7-553f2cf58935","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: oc-ox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'oc-ox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada75004-5a79-5126-a3ad-1010337820de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: oegk-sign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'oegk-sign.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ee1d16-95aa-5840-8685-cc09630ac9ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: oegk-verify.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'oegk-verify.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--409bf9ae-4e30-538a-a286-a8e0792c147d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: officialbets10giris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'officialbets10giris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43824ad3-e4ae-5c95-82ed-0869fc7cc7c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: oficial-kmspico.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'oficial-kmspico.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--191b8382-b890-5061-bd88-6d7034cd68e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olimpaura.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olimpaura.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb2a5fd-9378-5daf-8793-3e7e4c1de7f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olimpaura.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olimpaura.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--55690e17-ba32-53fb-bf3b-79a9d187a0ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olimpaura.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olimpaura.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1cb4ca-bf08-56b1-94ce-a42a89e9ae9d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olimpiyskiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olimpiyskiy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35a1df0f-1d76-5a0d-abf9-69460db31ee5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olovion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olovion.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4eccaab-5ba4-510a-941a-ed9f229ac5cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: olyxplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'olyxplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36588a81-91c2-5430-8944-753afeb4ad8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: omgomg0.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'omgomg0.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b068fe6e-dc4c-5153-b86a-b06db8f6891e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: omgomgsite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'omgomgsite.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4972a62d-5d59-589a-99b7-592aa079ddb4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: omni-rbcroyalbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'omni-rbcroyalbank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab53a8d6-87e7-5834-a144-7d691dbe1000","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onenote-apps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onenote-apps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0099fc1a-3e4a-5eac-bcac-9c4c94793799","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: online-cbnacu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'online-cbnacu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0b1462-48c6-574e-9a7e-e8bd8be57540","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: online-doxycycline-100mg.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'online-doxycycline-100mg.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e51d9ca0-66e1-5a92-9ed1-ca854457190c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: online-securisation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'online-securisation.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c6775c-9dc8-590b-bc2e-4f31444093b5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: online-zithromax-azithromycin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'online-zithromax-azithromycin.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21f9f0a8-af1b-55b3-8173-d9c54ba0aa75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: online2bmo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'online2bmo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58447528-b453-51f4-a965-659677b3f9f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinecasinoohneverifiziert.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinecasinoohneverifiziert.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a016dd0-87f1-5556-826a-abdcc891a1ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinecibcaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinecibcaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4011c392-d0f4-5d1d-b92a-1ec3a0dc5be6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinedoctorconsult.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinedoctorconsult.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4697ed-9fa9-5689-9682-3d1ad55fb6ac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinedoxycycline.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinedoxycycline.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0064eb-f54b-51a9-a613-fcf653d8355b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinedoxycyclineorder.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinedoxycyclineorder.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec8089c3-bced-5168-a0db-61985b52dcef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlineresetsupport-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlineresetsupport-portal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ae0787-cf93-54fc-b25f-2eebb5ca00c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlinesign-portal.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlinesign-portal.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d5c83aa-ba5c-5740-b448-bade530ab778","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onliprava77.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onliprava77.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80854190-cf38-527c-90db-e09c7f6e135c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlipravarus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlipravarus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a752b1b-dc50-591a-9344-7923f4e4ba90","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlipravaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlipravaz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43e6512-bfe9-516a-b827-9628a8d93212","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onlyxwin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onlyxwin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac6d72f-a6ca-5cf8-b4de-87e1a4a5761d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ontrevnuagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ontrevnuagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--305b1dda-9e95-564e-ad7e-2c43bad6e7b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onwin-original.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onwin-original.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1db546-d051-5b0d-84ec-2375ce361a90","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onwin3232.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onwin3232.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--38679ce6-8bdd-5bfd-be7d-f638a0b7f551","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onwin3443.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onwin3443.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--345693b7-5ff0-5b88-8c09-bcaa3319660b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onwinturkiyegiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onwinturkiyegiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d20472-ad89-5887-baca-520bb2fc06e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: onwinturkiyeresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'onwinturkiyeresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--755c6cf3-66da-5fc3-90c7-99a2b6c142d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: openeden.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'openeden.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97127044-9af8-5535-b93f-e1ea845a4b9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: optimismbridge.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'optimismbridge.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d40f35-18e3-5cce-b481-74ca1f10d07e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: orangetmpl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'orangetmpl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9169ab5d-dcfa-5c8d-84d0-0678de709701","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: orbitalstake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'orbitalstake.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03caac49-3f6d-57be-9104-bdd6849fa99f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: orizonia.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'orizonia.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--727a98b8-4bb6-54ab-93dc-d04212ca98ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: orjinalbetsaterisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'orjinalbetsaterisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c93a30-68c3-587a-a79a-51f7299918c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: osterdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'osterdex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a632e90d-88c5-5764-b94e-60cdcd8b4ba2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: otconlinepharma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'otconlinepharma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c978c166-4d2c-5b09-af13-03fa9be5d193","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: outinglooks.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'outinglooks.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccb90c5-fc77-52f2-89f6-7c1d334e8a4f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: outlook-apps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'outlook-apps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e2ec94-7e73-5479-86c9-a4ebe68e4357","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: outlook8web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'outlook8web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3cff010-74e2-5ee8-a44a-d57c038a81cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: overriden-host.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'overriden-host.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0428e78-4bda-5300-b953-1e675e937dd7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ovolore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ovolore.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3ed8dd-069d-566c-971c-e2fb0b999688","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ovowins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ovowins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1a6729-73f0-5d9c-ad6f-f4db2afba6dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: owenwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'owenwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3518a498-d47a-5dfc-aeb3-a3b572977b9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: owvstxod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'owvstxod.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53013534-51a1-5b5b-9453-793eff9fa645","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: oxdice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'oxdice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e66ed9-8c6b-57f6-afce-1793e434c855","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: packagedeliveryfromfedex212.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'packagedeliveryfromfedex212.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41282854-d61e-5166-8bc9-1e5295fffb09","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: packagedeliveryfromfedex52.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'packagedeliveryfromfedex52.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95bdcce0-9f86-5819-a5fb-665921481a7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: packagedeliveryfromfedex634.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'packagedeliveryfromfedex634.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd763b21-eb66-5faf-81c7-5e7ab84f31c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: paerax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'paerax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ecbd04-422b-5039-a06c-f162ebf1d54e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: paezax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'paezax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1e4fe3-19b5-5fd4-8ff5-64a80da6edfa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pageregisete.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pageregisete.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b86643-1a41-51fc-b0f2-5d9fe8c0e07b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pagereinray.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pagereinray.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a514ee-cee3-55e3-9776-06183ca0a74f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: painreliefhub24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'painreliefhub24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3287d3d-b4ca-54b3-8609-7b0057ff74b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pandalibraries.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pandalibraries.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3141b3ea-9016-53e8-8bd4-446e10e4fe75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pandexptress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pandexptress.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8be7ba9-733f-5505-84fd-b478d4e20937","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pandexxrress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pandexxrress.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30909803-251a-546f-9b50-d7bb5cb896e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pandexzrress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pandexzrress.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--854ff8a4-df79-557e-a2eb-e77ea06429ae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: paosax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'paosax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e663911c-2dc0-5380-aa06-92cbfe8d5fa1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parihit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parihit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--826e2db7-4a04-5d77-8d9a-3197e0d92fa4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parikaz24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parikaz24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f1e7211-2a08-5a92-ba19-6dd33249f26d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parkresmigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parkresmigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7046b03-ecd2-524b-87fe-e0b074c12411","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabet-guncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabet-guncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c048baa1-46f5-5b17-8fae-93e1973a54eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabet26.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabet26.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54002499-182b-509e-a18d-6b21a6045d21","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetgiris2.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetgiris2.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7663a7cf-a0f2-52ea-83f9-c7b5b7320e09","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetgiris86.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetgiris86.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb9eeba8-2187-5803-94e2-a69cacd65e96","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetguncelgirisadresi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetguncelgirisadresi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1b1d22-8dea-552a-82c6-1c9a41ed9307","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetguncellink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetguncellink.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e98893-1db6-5485-bcf4-f807cc5ed09f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetkoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetkoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a57cba1-9d11-5ad4-bca2-30db147f409a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetyenikoruma.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetyenikoruma.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e509c4-0c47-5d25-b0fd-fc93497ecf88","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: parmabetyenilink.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parmabetyenilink.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d69e70-5ab1-573b-af89-c1af4497306b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pas-port-pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pas-port-pro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d8bc525-13c4-596f-bdbf-a6192ee64f65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pasportov-zakupka.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pasportov-zakupka.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7378bee0-0098-5844-ac8b-d2f6c9f172ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: patch-portal.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'patch-portal.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea593e6c-fcd4-53b9-8209-a1d2acca6e69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: payitnowtkn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'payitnowtkn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d17e0b4-9721-5617-a93b-652a915645d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: payordie.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'payordie.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c278feb-0403-51db-acb8-129293be3546","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: paypal-identity-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'paypal-identity-verify.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--596d2c7f-cb1c-56ab-9c4a-4b7a06c210ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pazewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pazewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8df6c963-1cdf-5215-a687-98171536c0c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pazowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pazowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a0c8f1-d696-58fd-a8b9-45923f872d1d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pearwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pearwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f19fb10b-1004-5999-8b4f-92c7563741a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: penetex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'penetex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af6dfd8-8c76-5bb7-9ee3-60d13693a9df","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pennycoveglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pennycoveglobal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--241685c2-fae9-567c-af78-0c829fd6f473","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: penofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'penofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d30a1b-10c9-52e4-8e8e-35c76fb42af8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: penomex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'penomex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc204e7-4a39-56a2-be53-d5c2f8a22d05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: peogux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'peogux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d7be2a4-fa31-591f-8ac1-b8c3b1eba989","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: peojax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'peojax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5425c3d-3973-5c44-bdf2-10449e09642d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: peozox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'peozox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcef9873-30e0-5e93-82e6-bceca557a84d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: peptidemeter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'peptidemeter.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81784579-6062-5a54-b74e-4536b96e53f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perabet-girisnet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perabet-girisnet.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2ec5778-3436-558a-b057-d7e9803027a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perabet-oyunlartek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perabet-oyunlartek.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3fef0a-2e32-5e76-9f95-6a08ca984236","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perabet1653.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perabet1653.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f002fe48-3544-5649-b704-5e3e8e45c141","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perabetlogin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perabetlogin.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--76519ae7-ae8d-58a2-81fe-d303af0cf4e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perdotesf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perdotesf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57186366-641a-594c-b7bd-4e7faec1f1e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: perkscardsapply.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'perkscardsapply.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c503f4f-3c5b-5573-b6dc-bf792beb72ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: personalbankingscotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'personalbankingscotiabank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d8a32a-e3c6-58e5-bbb8-daf23c4ac8a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: petrolgasul.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'petrolgasul.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f2a246-f31b-5cac-b1f4-f39403a1e95a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: peupux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'peupux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eaa28de-6117-5087-bd4a-cce2e9451c63","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pfizercentreone.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pfizercentreone.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08d1a26d-bff3-5274-8c78-caee92e6bba7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pfsefyjtrdfg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pfsefyjtrdfg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94f09e44-ada8-578f-8baf-f3dfed829b4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pharmacyadvocates.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pharmacyadvocates.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a6b35c9-1e6b-57f5-9e0f-c429ff9f7b1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pharmacyonline-eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pharmacyonline-eu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--820caeb7-28fd-59b5-901c-42a00957854f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pharmdiscounts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pharmdiscounts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03d1c44-8a81-5ade-8eb8-3a20aa6602b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pia5proxy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pia5proxy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709cecbe-b39c-5b10-b016-f8f25b54108b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: piabetkorumaguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'piabetkorumaguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8d5870-b98c-5cac-9f27-0abcc7514124","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: piterguf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'piterguf.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d8eaf6e-0421-520d-b7f7-c6bf50ad676c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pixel-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pixel-trust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e313fa-b493-5cce-aed2-24cc8e3ad237","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pixel-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pixel-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e57c0b-bed5-5c5a-a1d9-3902a3effa9a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: piz47mip63.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'piz47mip63.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31630820-2685-5a19-a9a9-cac64d092d4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pizzalhat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pizzalhat.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eae3f99e-c2f1-50bd-951f-985429d39fbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pizzuhet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pizzuhet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b0bd65-9650-54e5-b4ed-24333dd75469","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: planet-play.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'planet-play.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5b28ef2-8ad8-5746-a53a-90dc9d34c71d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: platformcopytrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'platformcopytrade.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e9b50a-6698-5245-906e-61bfd7dafb2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: playmira.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'playmira.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc36c846-1b59-5c73-86a3-84193ad5e997","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: playxwild.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'playxwild.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc83564-3cd3-5518-b4f6-615599c40019","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: plonix.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'plonix.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65defe5b-d227-53b6-b7da-4bab03326cc8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pmhld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pmhld.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9df9aa9-da8d-58f3-b72c-717f636a6ee8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poamox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poamox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb636c4-2cd7-513c-a44a-71150b55ef3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--56bfc378-e4ed-5cb2-b4b8-f751b43129ad","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: podawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'podawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c33bcc77-0bc7-50b3-a362-251179af65bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poerux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poerux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad523c2d-b754-5e98-adea-4195777941d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pokewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pokewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce00216e-eb9c-5b98-8707-320f425251fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pokups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pokups.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b03cd6-860f-5767-85cd-1aea01fbf914","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polobetgel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polobetgel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--db511079-135e-5129-a669-5058aad908ce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polobetgunceltr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polobetgunceltr.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af481012-d9c8-5719-9fe5-ded21ccb396f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polobetkoruma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polobetkoruma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bebfd1fa-93e4-5d31-8d29-70e589157ddc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polobetresmigiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polobetresmigiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4914ebd7-96a7-5ebe-af20-ce8d8374328f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polobettrguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polobettrguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d409a27d-cbd6-53ca-ac78-b5a3f523c27d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polymakrets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polymakrets.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b760df-8177-5a4e-a757-9bfd9829ce81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polymarket-b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polymarket-b.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b65930b-9220-5f15-a88d-60edb059135b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polymarket-on.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polymarket-on.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a2cbbf-681e-50cc-8a3b-cd3da69f8b75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: polymarket-try.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'polymarket-try.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01c62458-d4f1-5d1e-9edc-72a582e4df76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ponewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ponewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4594283a-5f9c-5588-b712-2516ab232ca6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: popajmndheqwwe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'popajmndheqwwe.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6029bf-84b8-522e-835a-a812cdce3b12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: porewin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'porewin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c01cef5f-3e52-581d-9210-4ae061dae6da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: porewin129.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'porewin129.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b2d332a-a251-545a-86a6-933b05d36a68","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: porewin159.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'porewin159.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c744eacb-e718-53f0-b051-49793bf24d7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: porndepfile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'porndepfile.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c019e5-1143-5c48-af15-64ecbacb0677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pornk2scity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pornk2scity.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a59172-79c1-51fe-afc2-60eee1aae85a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pornkeep.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pornkeep.online']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--600449d2-f5fa-5ca9-ade7-dfcdcbd5a655","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: porovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'porovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91071a80-a4c1-51e2-9ecc-dcf322a214fd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portail-desjaccesd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portail-desjaccesd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8cbeae0-3056-5541-9b72-ba55b8feea67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portail-usagers-france.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portail-usagers-france.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdda8590-1dd4-5d4a-bec0-767f1887306f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portal-vmi.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portal-vmi.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ca62a5-60fb-5790-9159-a8ff4cd0b8e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portal1-meydanfz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portal1-meydanfz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb4b0a1d-2827-5328-8f18-77bd1779c9b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portal2-meydanfz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portal2-meydanfz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b47895e-edcc-51b1-8398-fa502e3c4f42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portalcosa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portalcosa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6318fd1b-6e2a-5360-a996-f19918e3906c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portalcoza.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portalcoza.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e7654a-e3ac-5156-b833-4afb15134499","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portalgmbz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portalgmbz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6e85f0-8da9-5481-af72-66b0d7efab7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: portalncs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'portalncs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b152f955-fde7-5a8b-8270-ae53c4b55b6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poshmark-regulation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poshmark-regulation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b7c7cf-d1c4-51bd-949e-b0aa69f82564","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poshmarks-usa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poshmarks-usa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--126ebd0f-090d-5595-8fcf-a850d2bb6732","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: post-onlinepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'post-onlinepay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4bfa04-e1c4-5205-8500-e08708272292","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: postcancorrection20.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'postcancorrection20.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--588653ba-a126-5701-8d0b-9cb585ff9fa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: postescanadaqc-livraison.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'postescanadaqc-livraison.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e9ed318-9d55-55d0-97a3-5c4cb2e326be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: postmarkapp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'postmarkapp.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2196d5-c72c-5961-b5c3-bd50b482a0f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: postweakness.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'postweakness.dev']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--94697792-0245-5ead-acf3-35347c226c1f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: potawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'potawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee3483e-ef8d-5bf1-979f-2b5895b6d901","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poubex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poubex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--91765d7a-0017-5f02-a872-831354f9822b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poucex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poucex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b727cf-ee6f-5204-9bd4-03bfcd56a9b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pouhox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pouhox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88ae106-8ace-5047-8def-009db9acfe25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: powedex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'powedex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0cf6d35-299c-5d30-aefe-0d01fbb6e555","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: powerpoint-apps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'powerpoint-apps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6830e1ac-8633-5939-9d50-cc255b0836b8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: poxewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'poxewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f11489e3-553c-5d93-98e2-54b6494a013c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--801c6e7b-0f05-5b1b-abd7-b9a40bbd78ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pragmaspin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pragmaspin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--750b58da-17d1-5eab-9b3b-9714824b2cdf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pragmat-game.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pragmat-game.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--887441ef-ef47-58ca-9267-cb06428858b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: predictorgame.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'predictorgame.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60ed686-78bb-5742-a0b6-c89ee5fb408e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: premium-trust.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'premium-trust.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b250e8ad-26f5-5a8b-8061-a51bf748c543","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prestivo-spin-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prestivo-spin-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fafcc084-823a-5b4c-b80f-d2a85c6eda25","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prime-change.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prime-change.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ccc0ea2-158e-598a-adc0-fb1af939ffd9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: primebeaconinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'primebeaconinc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67f8ee6-0275-5ad7-b955-1dc24669cb9f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: primebyte41.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'primebyte41.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac7a25b-e6b7-531e-847a-c77374fe022f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: primediamondcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'primediamondcapital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8ba29b-d755-5d29-9c2c-731d6ec2404d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prizedice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prizedice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a6834c-1336-5cfd-b92e-42bfe512d60e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prjxs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prjxs.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdce6f48-44f1-5376-82c1-b660eee58837","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prjxx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prjxx.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c808c1-d694-5e3f-b16c-2b51f12e40c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profile-accreview29.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profile-accreview29.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b040c20a-d75a-5cc8-93ea-9594d5309124","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profile-cgeb03.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profile-cgeb03.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3548e3d1-b30b-5a54-bfd8-b163cfbc23b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profile-recordcheck19.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profile-recordcheck19.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec4c7539-51b1-5c90-b25e-c8a3d5bd2e34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profilecheck-acc24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profilecheck-acc24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a088930-b50f-5f79-8c9a-5244cf7210ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profileclaim-acc30.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profileclaim-acc30.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd95d3bf-8870-5ddf-ad9e-f89fc0397a43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profileclaim-conf26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profileclaim-conf26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9016ce9a-ddd2-5965-9ea3-64353e022514","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profileconnect-acc04.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profileconnect-acc04.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dfc2bf5-b31b-557c-9c28-e364298b08da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profilecra-benefits05.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profilecra-benefits05.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fa71aa-3348-51f3-a1db-78d85e7478b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profilereview-acc16.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profilereview-acc16.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac9ccc7-e703-5788-a8d0-1481d9294b53","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profilesupport-acc041.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profilesupport-acc041.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9319b66a-e74f-55fb-87a3-26e9270665a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: profileupdt-connectnow1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'profileupdt-connectnow1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--037af313-a4cc-5230-9188-2dd79e84e248","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: promo-p.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'promo-p.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36080e23-a8f0-5b25-b326-d01520581481","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: promo-settings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'promo-settings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a646f287-47b2-5ae9-bcd7-77a66d0449f0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: promo-settings.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'promo-settings.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aad88ed-9334-59d2-be0c-e3c50cf3bd11","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: promo-sun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'promo-sun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26880ae6-8240-5da7-92f4-1b1b9d9542aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: promo-sun.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'promo-sun.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2720151-7657-5de9-b025-f466d1a76ffd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: propecia-finasteride-5mg.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'propecia-finasteride-5mg.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bc112b-a410-5ac7-956b-eb76794c96a3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: propecia-finasteride-generic.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'propecia-finasteride-generic.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd90328-76c1-52c1-9632-d4224bb181c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: propeciafinasteride-buy.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'propeciafinasteride-buy.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb2e6f9-f6af-5a6a-b0dc-bdb1c0442967","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: prostavive-up.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'prostavive-up.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--214c3696-b7df-531c-9585-d30b029f4609","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: protoolskit.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'protoolskit.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--716f0c7e-55b3-593c-a46d-7e2b37fda54a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: psdbest.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'psdbest.cam']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc19cc56-6e3f-5f4a-9ca6-54b142a6cb70","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: psemeetai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'psemeetai.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65639e1-ead6-5bf4-8710-e3dd5012afa2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: puavex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'puavex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ffef26-8d42-5afe-b6c8-9160cd86019d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: puebax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'puebax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--116b12ee-62d3-5990-81dd-ec2320ac1366","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pugewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pugewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cb4714-eb8f-52e5-9930-83dae7a181fd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pullkeep.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pullkeep.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fb6c93-d5b4-56f3-a728-ef8bbb8d61e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: puotox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'puotox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe745a50-9c6b-527b-9576-8b4bf35dd1ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: purematrixa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'purematrixa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c338465c-213d-59f6-8a43-8859cd390d7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: purnp-fun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'purnp-fun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--294d34db-cad8-54d8-b488-626a51cb0448","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pvcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pvcas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92b0b3c-bfdb-5087-b736-1291ae64cfce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pyowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pyowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d21e0603-35a9-550d-9b38-e758f4cde46e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: pzzahuts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'pzzahuts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef99b79f-0871-5244-8f29-2c0a3951e14c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: q49t15h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'q49t15h.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71ccd67-27a2-5809-a8a7-4b7df9f25951","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: qingdaosabertechnology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'qingdaosabertechnology.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f47e06-4152-5d09-ae3d-567577a940d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: qquantroai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'qquantroai.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad5e922-d571-59fc-a16e-7774475b2f5d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: quantix-finance.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'quantix-finance.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4963472-1e9e-5f55-90a9-926522cd2622","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: quantroaisw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'quantroaisw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb8ee526-4bf4-52a8-8bf4-541b454a5043","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: queenbet1205.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'queenbet1205.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb68d0b-8def-59e6-9473-1fa254b0b6f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: queenbet1206.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'queenbet1206.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d2f3f6c-c311-5050-8666-074a070e74c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: queenbet1207.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'queenbet1207.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52eb3791-bb4a-57c0-8a11-c3af86eae3d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: qundus.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'qundus.dev']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5033dfc-8b8d-516e-8a74-50d76dfbc4d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: qunowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'qunowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--907d0c94-02a5-5099-98ba-1c40454bd067","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: quonpex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'quonpex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab9f78d8-3e7a-579f-8a6a-7b3a79512c3b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: qyaobiopeptides.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'qyaobiopeptides.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f25a49b-9af4-5096-8eeb-1c8ff8a40748","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rackswin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rackswin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e464fd-d136-5bfa-b7a2-982806c4cf94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ragbizz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ragbizz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9972d827-b4a9-5210-914f-7cc7e5540573","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rainbet-casinos.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rainbet-casinos.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f6b9c30-a1ac-5a9a-9132-2783a1e6a5d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rainbet2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rainbet2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bef6303-565a-542f-a28f-d6680b9cfcdc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rajadewa138masuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rajadewa138masuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39ff18bb-87cc-57df-92a5-19542f75a8f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rajat.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rajat.money']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8ac231f-9d64-5f15-a865-d584c18742f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rakespin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rakespin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--025ddd0b-4d35-5309-9cf1-17f65652a1dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ranotex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ranotex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1de59d-1297-51c8-b09e-122187a837a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: raofox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'raofox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a929c43e-8a9b-5e54-84da-06bfe32b9b81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rapid-app.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rapid-app.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--008f1db5-2cdd-5760-8e5a-5d60ab96e940","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rapid-cloude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rapid-cloude.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--744c2fcb-e929-5901-896e-f65be730eeb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rapidfinil.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rapidfinil.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--695d1904-4569-57a8-b46a-927ad0434cb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a96835-444a-5e17-a876-13589d4de01f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: raydium-solan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'raydium-solan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58032bb7-313e-58d3-86a2-c95ebb08a200","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: razer-kraken-onion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'razer-kraken-onion.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7433a2dc-a771-5c07-ad0b-6a30287afc94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rb-417.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rb-417.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a34883-73fe-59a8-87f1-ce4a07f182af","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-clientaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-clientaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6662934d-a2d1-5000-af4e-27e26f713474","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-clientauthenticator.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-clientauthenticator.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf2ace5d-2467-545a-a7e8-80d8a750ea15","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-connect.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--307fdd08-7d74-5957-95e3-80bc83ca0310","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-fraude.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-fraude.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8115088c-8ff3-567a-8b60-15cdc5bdced3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-protege.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-protege.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9815ee-a969-5b88-9a96-08b404bd2fd6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-protegetoi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-protegetoi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17a6051c-5467-59e4-b5bf-de816f5df42b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-securityaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-securityaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0845077-10b9-5d54-b3a4-ce3542993165","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbc-supporthelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbc-supporthelp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61fa5229-72e9-5bef-b002-432e51cce3d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcauth2fa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcauth2fa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52904239-51e9-59e6-a781-20ca91e4671b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcbusiness-activate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcbusiness-activate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fbe675d-bf5c-565f-a0a5-a8feffb5c1d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcbusiness-verify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcbusiness-verify.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fa7a3e0-2cfd-5bd4-a221-771020d672dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcbusinessactivation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcbusinessactivation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffdb200b-a563-558a-867c-34abbd43c58a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcbusinessreset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcbusinessreset.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28106932-5e84-515b-b79e-9d07b2597883","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcexp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcexp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c63469-55d2-5cd6-ac95-f3c82e5645d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbconline-secured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbconline-secured.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c284e3fc-3576-527d-90f0-93cf87125f24","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbconlinesecure-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbconlinesecure-web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf6e9303-c268-5ba0-956a-9d9cdc61c902","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcroyalbanksecureportal.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcroyalbanksecureportal.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb97bd1e-f1b2-540d-bc75-ea53acca07ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcroyalbanksecurevalidation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcroyalbanksecurevalidation.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7c93cd-f886-5dcf-a869-a5909e349127","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcsecuredmobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcsecuredmobile.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffcf1365-aec8-5e40-9c0d-1f8c5b767a88","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcsecurity-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcsecurity-online.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ed33d4-7d90-5899-b1b1-a175c6118100","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcweb-secured.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcweb-secured.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08159749-445d-55d5-bb9a-4130462fd4b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbcxp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbcxp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36d8ea59-384e-55dd-9027-af400a04d7a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rbxsc.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rbxsc.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a01e44b-104b-592a-987f-c220ec6bdee6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: readytowearjerseys.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'readytowearjerseys.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2630c782-44fa-5c1c-a023-6b3a37c785a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reahox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reahox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c673983d-1a65-5f78-8ff7-a1ea26048b6e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reakox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reakox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ea2516-d87f-522b-9de7-ebb1e7c46c5e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realbahis-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realbahis-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e22f053-05a4-5c07-9ce3-1e2599dc8e81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realbahis-guvenburda.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realbahis-guvenburda.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2b6f77-6970-50df-ad9f-b35b10b1da83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realmoney-pokiesapps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realmoney-pokiesapps.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d9e9f60-8512-54a9-97c3-95042542d5ca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realmoneypokies-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realmoneypokies-app.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3411412-caee-54aa-bb5e-24610168ad2a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realmoneypokiesapp-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realmoneypokiesapp-au.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3d6400-f3bb-5c97-9103-e7a3937a4102","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realz-cassino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realz-cassino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99241a2-2808-5a66-822a-89171c512970","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: realz-kasyno.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'realz-kasyno.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c41f8a20-c46c-5c15-b577-84766842d8e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: recourscollectifpain-paiment10001.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'recourscollectifpain-paiment10001.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffb4c453-f26e-5d5b-b8c4-5d428b6191a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: recourscollectifpain2026-10001qc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'recourscollectifpain2026-10001qc.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ebf6422-b4e3-5d20-ad05-9f4dacac909a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: redbreach.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'redbreach.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6ff8fb-6e05-5639-8fc0-c5e1ee9cc5fa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reelsofjoy1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reelsofjoy1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a25e0fa-fff5-5290-9df3-10945a00c6f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ref-link-dit5mfs31bi3kt27.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ref-link-dit5mfs31bi3kt27.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a09f70-ddff-5bf9-b32c-3e27192231fa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ref-link-ken3mdi93vet2lk28.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ref-link-ken3mdi93vet2lk28.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1583a66-3dd5-5ce3-8dec-38efa08f5545","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ref-link-pwn41ewl3ats5k29.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ref-link-pwn41ewl3ats5k29.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dac00c2-d9d4-5b46-957e-513f66d12e2f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: referral-link-it32gkmz3i1dm26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'referral-link-it32gkmz3i1dm26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8321254a-f022-55bf-a085-586ea488da1f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: referral-link-o2idk21link25.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'referral-link-o2idk21link25.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc74b03-b691-57c0-ae1f-858de8f0e093","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: referral-link-opdl2linkd31.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'referral-link-opdl2linkd31.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--955e59c2-c672-5d87-8ba0-ad3604c30d34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: referral-link-owi3kd4link30.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'referral-link-owi3kd4link30.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e592f8-3f56-51ac-af6a-63606c08f6da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: refremiseargentcostcoid0420.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'refremiseargentcostcoid0420.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bd9812-7695-56d3-98ab-47cb7ac301ce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: regalrosettebengals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'regalrosettebengals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f07f6d78-972a-5ef3-a2c0-5eae7e0357ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: regulation-telecoms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'regulation-telecoms.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--92376f8e-48dd-5290-bb50-f6d3dd1f0ae4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: relay-colis-fr-monde.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'relay-colis-fr-monde.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e6eee-6ac4-5c0f-8e37-5de49b88554a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reserve-ch234d.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reserve-ch234d.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7ae6abc-866f-5528-aa99-f1575ef60b26","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reserve-ch3463.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reserve-ch3463.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9930da33-1139-5e38-a995-18f92518be5b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: resmisuperbetin-girisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'resmisuperbetin-girisi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d1898cf-dd22-529a-83e3-d03d4f70dcdf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: resogamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'resogamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f002d0bb-47ba-57c0-a5bc-2b939fa9ae1b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: resolvecenprot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'resolvecenprot.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5620434-7c2a-593d-bdaa-1d0acd41fd33","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ressources.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ressources.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1530c9a1-a31f-50e4-a97c-d970e7718b20","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbet-2o26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbet-2o26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d8d3a62-49b7-588b-ad4e-e2cee5251cdf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbet-destek.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbet-destek.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d451751d-a5a9-5b98-af9c-4a64b7491e7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbet-girisadresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbet-girisadresi.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c06c5d54-155f-533f-b550-68b05f38b14a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbet-resmiadresi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbet-resmiadresi.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd1fa46-c229-5b35-b3be-3c496b8e07ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbeterisim2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbeterisim2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12159ddd-fdf1-5e93-b962-49fd0ae6fb20","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbetim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbetim.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebe9124-dc35-502e-91c7-dfde57fae946","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: restbeting-adres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'restbeting-adres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d848e0-5288-5112-ae9e-5da9d577a436","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: reudax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'reudax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee73d30-b72a-59b9-951b-a5a189ecc9dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rev2credit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rev2credit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d761d374-e8da-50cd-a0fa-c8e18c062acd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revenue-canada2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revenue-canada2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b315270-db15-5226-9b13-3a8666131480","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnagncd30.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnagncd30.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e55e058-8529-59c7-886f-efce531e3c0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revncdagnc04.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revncdagnc04.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2129fa2-b066-5a77-9d03-350e5bf3ffda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagnca0726.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagnca0726.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3a8a60-5519-5fbc-860d-d878fd057379","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagnca2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagnca2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08621d16-7c72-5e30-a6dd-435bcf0e6d0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagncd02.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagncd02.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe30b2e-581c-5bbd-bec7-86918e6fba14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagncd05.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagncd05.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--61852b64-ff70-545c-a6ef-7a1dbeea4552","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagncd0525.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagncd0525.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cda464a-e988-50a7-ab81-6064eae80d0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuagncd0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuagncd0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d797bc4-780a-5bf2-887f-541f3f3bf985","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucagntc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucagntc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1615aa-fbbe-59fe-a450-f4791194bb75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucd2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucd2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32d89d9-77aa-5110-8a77-45f8e917f9d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagn0515.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagn0515.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9935db6-9522-5e64-8b6e-7ffbd8099e58","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagn2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagn2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89fbd652-c538-594e-ae8f-aee48e0b3ee3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagn3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagn3.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d749b6d1-1bad-562c-a374-ef41a33e76e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagnc0426.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagnc0426.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ec5b38e-bb3f-50f3-8d96-9b265aac7d21","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagnc0526.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagnc0526.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a36a0aa8-0605-5847-aa24-3d6ae0d57e9d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagnc1126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagnc1126.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bdb5f80-51af-5ff6-91df-f19b27a97fe1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagnct2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagnct2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--914fd726-4ec4-5ea2-99c9-f1485c38251b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdagnt2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdagnt2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bdf0fde-1fe8-5ab5-8b7f-44d1aeae3fa0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdnagn2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdnagn2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--994c1af1-57a1-5226-bd16-beded8eae2b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnucdnagnc0626.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnucdnagnc0626.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80786370-c70a-5662-b9b2-9fe377ba5780","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnueagnc0618.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnueagnc0618.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9921fb1-988e-5c4f-9629-b259704ea157","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revnuecdagnt2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revnuecdagnt2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae81db4-4177-5641-8521-55378217f177","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: revolut-slots.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'revolut-slots.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd610856-bcfa-5b3a-8bf5-16fcc9cadd67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rexawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rexawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43662b1f-284c-577a-9410-099ef1cfbe16","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rexfuse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rexfuse.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cd9bbe-53d5-503d-afc6-9c2cdade8584","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rexuwo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rexuwo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b0dbc6-46ff-5fc2-b02c-cf7ece3d4d2d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rezowin156.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rezowin156.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--103d4469-f95c-51c5-87cb-19aa9b7ae648","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rf-pasport-pokupka.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rf-pasport-pokupka.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6633207-ef1b-51b0-a5d3-f05d58019148","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rheafinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rheafinance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7b09e9-1ddb-50b1-a7d4-31336852b8aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rhinofi-dex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rhinofi-dex.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b6583a-a475-54ab-b0dc-9c21cf5c882b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rich-halls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rich-halls.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85eb4f06-9059-53ae-b65a-e0479a999238","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: richard-casino2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'richard-casino2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e21128da-0d9d-5b11-9cb3-64d1b296998d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rimowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rimowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--701c5af6-97bc-5295-861d-36bd31b8d3d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ring-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ring-protocol.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75175823-2a90-55d4-beea-65f79222ae92","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: riotzed.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'riotzed.lol']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--05d08956-b7bb-5d62-9d29-9e7c4ed6a56c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rivcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rivcas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e5ac6d-b082-5f22-ae12-b8b4467b0b6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rizecas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rizecas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--969e4a60-f8ae-5310-855e-076ad17cc5e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: robloxing.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'robloxing.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09859491-6aad-52a4-83d8-af9951c60905","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rocket-perps.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rocket-perps.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c2cb19-4f0a-55a3-9ca5-2574d578e94d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rocketzone.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rocketzone.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2345ef14-7e5f-5a69-830e-4d43a1d466cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rofumex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rofumex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--163c0023-b1c5-5864-8eb1-c22aa5785677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rollbets.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rollbets.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b16bf2-a82a-570d-824c-fa99d6ea1d75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: romabet-girisim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'romabet-girisim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--263f6855-195e-53bc-88ce-6ef5da445e5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: romewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'romewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83de3b48-20ea-5085-bd67-8215a4d2bbd5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rousox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rousox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d4f725-8a8d-580f-9bd3-fb66d796fd7f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rouzax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rouzax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--693687c8-8e4f-5b5a-9b0b-2d30be5f507c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royal-mailuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royal-mailuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2f5187-d077-5011-8a61-4f8f7d150103","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbank-onlineportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbank-onlineportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81eaa96-cbd3-59d4-9c95-6f0d87cbbad2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbank-recover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbank-recover.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eb403bc-7708-5e3a-92f6-e228c42f205e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbank-secure-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbank-secure-web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ac61ab-8726-533e-8f8a-82a053e17d3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbank-secured-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbank-secured-online.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--303e71f3-e7df-595e-89fe-40dc767ebc8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbank-secured-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbank-secured-web.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d736a833-d285-5597-b264-fb41256961d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbet-2o26.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbet-2o26.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4b6578-ecd5-55b7-971f-8e1774ec9ab1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbet-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbet-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b05cb21-6b29-52b9-8cf9-fbea00a9f4c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbet-mobilvip.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbet-mobilvip.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a7b0c6-b619-5d02-b302-a0c2f3db13e1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalbet-vipkazan.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalbet-vipkazan.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e835970-b155-55e2-ad36-36368358cc05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalcore.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalcore.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--431c1800-81c2-59d6-ac38-8ce44d67936a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royaleuro-finance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royaleuro-finance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6600685e-8c0a-5c6b-a6f8-49580e495dc3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalogame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalogame.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a6d5ce-b010-51a8-bb89-76144df012de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: royalvanta.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'royalvanta.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62142ed9-9f21-59f9-ad1f-e3d637c607c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rozalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rozalbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc161810-fcd1-5b6c-a318-504b91c95a1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rozawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rozawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf131e6-75c3-5052-ad3d-bfc85a671fa5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rs-aktivacija.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rs-aktivacija.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7964bc1-d2f5-5dc7-a65d-87bf02aea285","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ruamox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ruamox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9e3e18-ba57-5456-afa9-ebb165d3608f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ruenux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ruenux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e27ae4e-9c0a-57f7-b2d7-4cb150567362","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: runofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'runofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1daafb23-4e09-5b7c-b2af-5f81365a1e6c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: runoplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'runoplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eb4939-91d4-5823-9a41-5a5d953b2906","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: runovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'runovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e88e94-2d5e-54fc-8720-415d885a3103","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvenuecagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvenuecagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1162e6b9-b3de-5094-a664-6018446b9dba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnuagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnuagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0561be31-8bc0-5e48-9176-12d1e8a9ef50","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnucdagncta2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnucdagncta2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e0fcd97-6ca7-523c-8b3b-2099c045e8f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnucdagnt2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnucdagnt2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df87699-f838-543e-b9e4-e85e9747dcce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnueagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnueagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb4f6fe-5a6b-57aa-8509-6fd6f8b2345c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnueagnctca2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnueagnctca2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6fbfb7-a05b-5064-a87a-bb4cd4ceb5ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnuecdagnc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnuecdagnc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0223cfb-8e62-5e80-9ad2-b5badd4aac72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rvnuecdagntc2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rvnuecdagntc2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c2ea7d-1c8c-5c00-9585-bcb93e43cec1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rybelsuspharmacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rybelsuspharmacy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a6f481-821c-5a34-b5e7-b1510485160f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rysk-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rysk-finance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e7fe3f6-4ea0-5f93-81f6-9dba812a7cb6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: rysk-finance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'rysk-finance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be11dbab-46cc-5dc9-8b2d-e46192592228","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: saawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'saawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--934b9ad5-10f4-53bc-8c2d-e2bfbd99583b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sabowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sabowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e87811b-e15c-5b98-a827-8a2246a8a807","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safe-worker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safe-worker.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2ab6f7-36c6-51a0-b6b6-0a55d631a91f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safepay-mobile.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safepay-mobile.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b78b264-ff22-5d21-a281-ce3dd75688a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safety-amex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safety-amex.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e649c293-d94d-50db-ac80-36ba9e13e3f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safety-amex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safety-amex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f1ebeb-d738-5f46-93f6-7595ecaced59","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safetycheck-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safetycheck-trezor.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--664c98db-9f4c-589c-82ff-50a5a452b40f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safewellmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safewellmart.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b54e293-9a22-5c4a-a5ed-048f8e915973","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: safirbetgiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'safirbetgiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5c2cf3-16f1-5c9e-99c8-e7622d4a9736","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sagonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sagonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--785ef1fd-3d04-57a8-a28c-500ed8ef2d7e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sahabet-guzelgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sahabet-guzelgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e8990bf-b2ce-537c-9fce-7ba1281a2acb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sahabet-orginal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sahabet-orginal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b692c67-8116-53a8-80a0-e59e1ee4ae98","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sahabet-resmiyegir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sahabet-resmiyegir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72b5f63e-a8cc-5cef-99c6-31bb01dfa706","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sahabeta-erisimresmi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sahabeta-erisimresmi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c73298-d104-53fe-8691-b903215a67c8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: saif-renewals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'saif-renewals.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f4761-954d-5ccc-88c6-1a77fdf7765e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sakewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sakewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d3076f-d454-51db-b53c-a3cef582e9a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sanctum-dex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sanctum-dex.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11e1cb4-3b91-5788-90e8-ecbe463a2e67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sangonbio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sangonbio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418bda2e-7106-50a8-a305-30926f8c6e8e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: saohux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'saohux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c78dce-eee5-55c6-b50b-43972bb87ed0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sarevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sarevex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c362975a-6573-5031-afb9-fdd1bd936e93","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: satevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'satevex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b247141-310d-51db-a099-073e53650c7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: satovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'satovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a5c7c0-e008-5305-bb62-196f0d9629d9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: savehub24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'savehub24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b93a5990-1e21-5f37-92cb-4bc5557d8f64","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: savexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'savexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0def5a6b-647a-5c3b-928f-9ad5f62f3c97","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: savroxo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'savroxo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e078bd-8bbd-57c4-a18d-a4227ab2f037","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sawadex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sawadex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cfc6b9-3bc9-5f56-8e7d-df790dc26db5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sazoplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sazoplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee67c24-9a8e-5edd-a781-f6dfa76fb8c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sc0linkverify.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sc0linkverify.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8695832e-5fcf-5b4a-87e7-6499c97844a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: schulerabstimmung.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'schulerabstimmung.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bdabe4c-4590-59ac-980a-127455c10b22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: schwabbank-ssb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'schwabbank-ssb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7f1081-0f89-5f59-8f48-a9c2f97f6527","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotia-startdevice.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotia-startdevice.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f049a2d2-5466-5b86-8b76-e7b0ca887ea4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotia-startmydevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotia-startmydevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9c3f8aa-7426-52bb-815b-740ab9801b12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-alerts.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-alerts.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--faec2fe0-f8d5-5a9b-b037-0ca8a25a7907","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-autoriseddevices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-autoriseddevices.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a81fdd7-6aba-5d26-ad0c-b70830df6ce0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-customer.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-customer.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f28fe9-afaa-5fa2-a0cc-fe76f0b07829","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-myapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-myapp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--910f998d-58f1-595e-b101-f4816ded63be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-myappupdate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-myappupdate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b82c54ae-0359-54fc-8104-6c9d268f1dac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-securityaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-securityaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70eadbc2-aae4-5cff-bd28-6e4d932fba5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-services.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-services.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db6d689-0445-578d-93f6-0504d46038e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank-verifydevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank-verifydevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f806f20-d856-5efd-a88b-7a4c6a74560f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank2fadevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank2fadevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--32bc4711-1a3f-50c4-bc2b-87a082d7f773","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabank2sv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabank2sv.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03428f66-cbc1-5d39-98d4-3833e0c0ce76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabankconfirmation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabankconfirmation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--419c90f5-5b7d-5dc9-880a-4c56854edb36","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiabanksecuredevice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiabanksecuredevice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf7e25f9-3682-5b1f-b29d-ce9633255b9e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiaconnect-1secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiaconnect-1secure.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c306e0-0c23-5109-b86f-e78ea6ac994f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiaconnect-token2fa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiaconnect-token2fa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7add30-5016-52fa-9d54-0f0142b60d8c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiaconnect-tokenweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiaconnect-tokenweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8adffa05-a692-5ee3-b182-83d688bc840c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiahelpdesk-support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiahelpdesk-support.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe4cb6d-68dc-5c7a-8b9b-4ebe41a6a9cd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotialerts-setup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotialerts-setup.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43bfb49f-77a2-5a52-beb8-7086bb5f86c4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiareview.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiareview.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb77ad1-a394-52a8-a28d-cb92b53f485d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiasafeportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiasafeportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--370b3393-a372-572a-8c1d-deabcc114c91","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: scotiasupportportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'scotiasupportportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3641df3e-feb8-507a-bac7-df74010e4aeb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seazax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seazax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a13e13-bbc7-591a-8c86-5fa209ad5b35","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secu-acces-portail.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secu-acces-portail.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--286b2bb1-292e-5bdb-8313-b33aead8d6f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secuclbcmobi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secuclbcmobi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1565de22-1242-5605-993c-dcd36448c93e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secure-acces.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secure-acces.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e10692f9-5de1-59b6-962e-930bd08b9489","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secure-amex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secure-amex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a1542f-de09-5b16-b875-9df8bd1e57bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secure-fansly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secure-fansly.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d15f53-a484-5020-8caf-73c7128753fb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secure-oneshare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secure-oneshare.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d762cfc8-f7fa-5acf-b9a5-c893877396b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secure-onshare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secure-onshare.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--332c6c7e-5931-582e-885a-feaa700a3a3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securedrbc-client79112.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securedrbc-client79112.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--362ecbdd-0edb-5ecc-93c5-1103e6f22064","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securedrbc-client79412.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securedrbc-client79412.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7703f2-dfad-5c1b-bafd-1c40ed7153ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securedrbcaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securedrbcaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c697dceb-6319-5456-b46c-3b8fe7c0cc6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securemypass.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securemypass.tech']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adc0eb3-beca-5e96-aa81-65f7937c5d60","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securemyscoacc-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securemyscoacc-help.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--815bd8c0-6320-52cc-a64b-4418c4d2421f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: securenow-unauth-transaction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'securenow-unauth-transaction.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0edb6f-9d96-574b-a86c-2826b604c373","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secureplus-consorsbank.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secureplus-consorsbank.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffbecbd6-6df8-5feb-bc60-af868d3b8a1d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: secureportal-easywebonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'secureportal-easywebonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d7e90e-1a2a-52a4-b412-e9e56598e1d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: security-amex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'security-amex.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfff760f-0131-5790-9411-ad6fcc28f6a5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: security-bot.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'security-bot.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1074ac16-5940-5ad7-b977-9eab7bcf7ecc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: security-gate.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'security-gate.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b66667a-3115-5164-8fe6-89377782c866","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: security-human.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'security-human.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b0f32dd-4821-53a6-b546-9713f5ac9b19","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: security-safepal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'security-safepal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddd55433-a8e5-5662-9f64-ef79e5412dd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sedovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sedovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba5870c-8664-5340-b244-7fe71c400989","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sekabet16144.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sekabet16144.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--148df15d-fda0-5e7c-be4b-6134c486c378","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: semewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'semewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30cf9ef-2da1-51e4-b987-9561c033a1c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: senclgricl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'senclgricl.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e8534d-ab22-56a4-8e10-50c3a47ab2e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: senclgrid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'senclgrid.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0c8b03b-7c4b-54bb-9b00-42c51a11bfb9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: send-vk1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'send-vk1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b23160a3-6f39-5bbf-b493-d9236f3ab177","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: send-vk2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'send-vk2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a618d237-2db7-580d-9102-922f93c9bd56","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seniwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seniwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d2da963-29b0-5e40-9628-ee1ead177441","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: senobex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'senobex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d550af-76ad-55b6-9491-fb55e344ec84","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sentora-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sentora-v2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be4d6fb-5cc0-592c-a55f-4e140dd44a9a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sentrydb.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sentrydb.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a659c19c-440f-5651-a7b1-b0c4f01c04d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sepovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sepovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ff3dca-f2f2-5264-9be6-2a5884f6309d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seqonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seqonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--199eb325-7196-50a4-9f88-577c17cbfb23","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: serovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'serovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cc86f2a-2481-5716-9578-65ba68f47638","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: serowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'serowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567ab606-9d74-53b2-83f2-ae54a10a81fa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seruwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seruwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1af8e93-2532-54d0-920f-e35753b67e66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: serv2ac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'serv2ac.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9fe2f11-03bc-59d0-860c-985d95470748","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: serv2tx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'serv2tx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba0e3fb-e10e-5979-92cc-5dd092318699","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: serverslocked.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'serverslocked.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c0d8a7d-38e2-5cfd-b9b9-166e3238996f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: servicesconcilia-reglementpain.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'servicesconcilia-reglementpain.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97c0f12e-7d54-5809-a99e-c32b954d24fd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: servisprava.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'servisprava.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9342898-1860-587d-91fc-4c406d59b1a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: setupfirmware.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'setupfirmware.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3df9dd3-2910-588f-9967-6804878084a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: setupmydevicetd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'setupmydevicetd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d845a2d-4e88-5e6d-8624-9cad195f3310","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seukox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seukox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c14de42a-fa26-588b-80bd-1d71c58f624e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: seuvox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'seuvox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a592ba3-da41-507e-bf42-dba359f09606","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sevilen-girisler10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sevilen-girisler10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfc4e79-03bb-5d2a-bc7d-aa20402e09fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sevilengirisbets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sevilengirisbets10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0db507b7-deff-5a36-b176-d8bf4b665f76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sevomex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sevomex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b18d71b-0725-55fc-b044-7d95dd4a9b73","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sexdep.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sexdep.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85b02e4-f8fd-5f71-b6a3-ed517a2cef3d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sextop1.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sextop1.page']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ad6492-a2ef-5ddb-b69d-e84704ae5062","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sgwn-resetmyalerts-rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sgwn-resetmyalerts-rbc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d14ebab-e2c2-5c82-916d-7cbfa0c96fa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sgwn-setmyalerts-rbc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sgwn-setmyalerts-rbc.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e461159a-ca27-5781-aa8a-90154249e59e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: shadowexchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'shadowexchange.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e4ccd2-4854-5815-9bbb-157d819e8df5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: shanghaisigmaaudley.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'shanghaisigmaaudley.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e46b86-ad5f-5c78-87c5-583817fc973d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: shanghaiwibsonbiotechnology.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'shanghaiwibsonbiotechnology.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--648f7d1d-e763-5b51-aefc-02db398d977e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sharjah-fz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sharjah-fz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--220c017d-dd5e-5519-811e-ffe8b53b25a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sharkhub.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sharkhub.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6598872f-e849-507f-b180-eca0caf77bf0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: shepherdlm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'shepherdlm.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c691b7-bd9b-5ce5-b769-2a543eb969e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: shuffex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'shuffex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcc3b5e-ad83-5db1-96cd-93b9fe3a60e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sicherheit-amex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sicherheit-amex.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d05587b7-7b95-50eb-bd8b-6c03f6d3c9f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sign-portal.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sign-portal.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b730d217-e6f6-57fd-a535-05494dadca8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: silbering.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'silbering.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e747891-0dab-5b2f-9cfc-abb1b3e6da74","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sildenafilo100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sildenafilo100.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--017874c4-6d70-5d0a-8b08-b18c76c45577","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sildenafilviagra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sildenafilviagra.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed85df53-66d3-5304-b550-9f8ccf0fa85c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: silksuite.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'silksuite.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae2de83-5c6e-5cda-ac13-dca4faf94bc6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: silksuite.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'silksuite.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01751ba-e404-54bb-af8e-7b09e041fc5a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: simbox-voip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'simbox-voip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--131c93f3-1d7c-55ac-a491-09c31008418a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: simpliiadminportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'simpliiadminportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2f6769-3a14-52f4-ae65-7ffed4d8065a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: simplygobenefits.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'simplygobenefits.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12b90fd-c02b-5a65-bd05-8ffda0183f3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: simvpnhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'simvpnhub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82acd5ed-ae15-5474-8b2e-01832a3c3326","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sipc-help.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sipc-help.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3852ba11-ea2f-544e-92f4-35ae5e1e8587","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sipcprotect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sipcprotect.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--31cada02-bc1b-5ab1-9a6a-252cba49f559","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sipmieswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sipmieswap.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5abd8b4d-8774-5c7f-8e29-22ab6ebe3735","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteler.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteler.fit']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a80ce37-0a13-5b60-a416-cd976276e1bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteler.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteler.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1b5e0d-b69b-55dd-824d-381ca37a0057","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteler.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteler.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--993a0cdf-4897-58bc-a320-9e0599089d0a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteleri.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteleri.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14744cac-3d98-517a-b424-ae527e731540","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteniz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteniz.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aafe73e-d377-513d-a4d3-e7a6c99ed1c8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: siteniz.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'siteniz.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8eedfc-05d0-5485-a8c3-eabf3e8c0e7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sitesi.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sitesi.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad77b8c0-eaf9-5362-9faa-55ff4d8a3d94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sitesi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sitesi.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f3257a-3266-55f8-93a8-015faa4f39c9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sitesi.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sitesi.work']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58c17c4-c581-5c03-a1db-2f92ca1178e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: skate-amm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'skate-amm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41159175-d3b6-5369-982d-03332d760cb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: skinfolio.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'skinfolio.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f079dff-2be9-5a50-933e-15f44f4490d4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: skinorac.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'skinorac.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c316a2c6-3f11-53dd-885d-cbed54b7e3e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: skititt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'skititt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08f43a1c-5b0c-5429-8503-a9d65d613a41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: skylaserlogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'skylaserlogistics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a79db42d-8bea-5d08-8043-9144a9c0e729","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sleeper33.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sleeper33.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a18cdd-c05a-5b9d-b0bb-bb90ea152527","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: slotsbeast.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'slotsbeast.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdc701a-1e2c-5c22-926b-3ef9239e45d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: slotsitelerivip2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'slotsitelerivip2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f01e2a-c5ea-5616-94be-c60d54dd5d1e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sma-msx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sma-msx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dabf151-1668-5ec4-9dd6-6a4a32737498","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: smriti.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'smriti.live']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d608df4a-d398-5177-8c6a-b72e3f866325","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: snugwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'snugwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b635a4c-6bd7-58e6-9507-06b549b4b351","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: soafax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'soafax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3d9b7c-f8e8-563f-a14b-a53b8188c7b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: soawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'soawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14ca2fe7-d702-5530-b541-fa2fd514f890","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: softroma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'softroma.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cead1a7-a7f3-5d2e-b315-1cd3a549df10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: soistice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'soistice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89303520-b192-5674-ba8b-bd6c71823b2e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: solaup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'solaup.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aba0d2b-4e54-59fe-926d-67678fb10059","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: solayer-staking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'solayer-staking.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6104d89a-0e7a-5a2e-99e8-402edce0ab99","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: solctise.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'solctise.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0df9ca3-81e6-55fc-a198-56d5f653e900","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: solixplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'solixplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b362b7ea-dfe6-5261-bfae-742fa944e9ff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: solscans-io.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'solscans-io.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dd8f7d-8b84-58d1-87fa-3ed2608bd3b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: soprasteriausa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'soprasteriausa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1a912a-59d6-59ac-a19d-961dbbed026d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sorafex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sorafex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3da858bc-be14-5604-bbb1-97720044c888","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sorewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sorewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63558445-35e6-574d-a34b-d0dcb4fb4eaf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sorewin149.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sorewin149.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--768b28f4-b31d-5bd8-aae0-e7b50e42a864","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sorewin187.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sorewin187.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f942fc5d-956f-5839-883b-9a50cf399013","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sosawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sosawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b98d30c8-5f3c-5a37-bdc5-24798ca3a1d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sotexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sotexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a0dd78-21bb-5330-a45a-5968497c9e2d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sovexplay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sovexplay.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97099aa4-b637-51db-82c6-aaaf948043f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spacecasinox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spacecasinox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ed8dc5-e359-51b2-b03f-8a85d576ce66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spacexgives.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spacexgives.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e43ad114-6b7b-57bb-9b36-dce9e0e65a14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sparkdex-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sparkdex-app.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5cab77c-590d-50fe-9680-9eb2c765c701","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sparrowswallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sparrowswallet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ad4c92-0347-5f16-975b-3b768af37195","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: speedtara.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'speedtara.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--786e7a24-fd09-5668-aa1a-49eca907c696","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spider-secure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spider-secure.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c409e8f-9820-5928-bbd9-3961e4e40819","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spin-wineracasino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spin-wineracasino.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc743076-2bc8-5779-b03e-72db21aabd8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinaxa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinaxa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a9d235-eac8-5f75-8aa3-95c8339674f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinbet-mexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinbet-mexico.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8fdd9cb-8630-5d65-ba3c-45b167fdc82e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spindog-casino-cz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spindog-casino-cz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a1f522-4808-5138-97f2-abffdc44d0e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinember.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinember.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d8d121-92c7-5bbd-bd02-eba17c30142f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinflex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinflex.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--159d544f-fbcb-57dc-ba28-bd396e530eec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinkoo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinkoo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a84beeb-d935-5f7f-a3a1-5ac834cf3855","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinlordx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinlordx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426d83fb-3ccd-57ce-853d-6895dcac17ca","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinlox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinlox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--114ce958-5b01-5493-8d95-ca24b3c75695","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinmillion-casino-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinmillion-casino-fr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a302c17-615b-5653-ab52-401901701d26","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinnex.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinnex.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9648369d-d9ea-5db5-ba14-5d2c63f0318d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinpalacebetca.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinpalacebetca.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede4c71b-60f0-5fe9-a96c-b56366ae486e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinsala-casino-fr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinsala-casino-fr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b94f702b-6bae-5578-ba86-0c435dc42e07","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinstorm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinstorm.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6f768f-b410-5db6-b6ef-0949ae9a2975","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinsy-casino-france1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinsy-casino-france1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7aea63-c5a0-5b34-9616-d269493af8c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinsy-casino-slot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinsy-casino-slot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99203508-0930-58bd-bac9-35a9c1ee6e3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spintitan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spintitan.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffd512e-a553-5e8b-a8bc-6923c70883c0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spintrey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spintrey.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef2ce6e-f81c-5b92-88bc-57e4995f27f8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spinvision.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spinvision.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8afb974-5083-511a-b19c-d58bc5e99a7d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: spookwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'spookwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd3d8a7c-1916-5526-a0c6-6a77ee8b21e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sports-girisleri.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sports-girisleri.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cdcdc8d-98e3-5d43-b906-7f6ace318e2a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ssiophone.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ssiophone.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9125c6-57e7-5de3-b3e5-cdf5c6aed430","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stack-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stack-trust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3d1778-bf44-579a-8e06-fb4aa89881e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stack-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stack-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69a88766-edf7-59b5-af54-e53d7b45334c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stack-tw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stack-tw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29673e66-def8-5792-adc3-9f3005cf8cfa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stack-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stack-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced9ab5f-68f3-5b5f-9358-2f51bb4bab64","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-fly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-fly.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d865980-00a3-5587-a0ea-2a3c1448ab72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-go.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-go.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--583cf178-91d2-5e3c-89fe-3a1cbe04833b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-max.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-max.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2a590d-ec94-51e8-90fa-9ac73dd80233","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-panel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-panel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eacb0228-cf53-50e6-aaca-274a8bd8066f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-planet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-planet.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7e40453-0306-5b83-80ea-5138952a78a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-play.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-play.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f311f089-c5bd-5af2-aec2-2c5c6840c71b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-pump.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-pump.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c20acda0-14f1-5af7-9791-9861814f330f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-sky.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-sky.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70528293-9a87-52d3-b550-736a863849dd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-spot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-spot.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30435033-4f23-58bb-a6f7-48f71f2f95f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-top.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-top.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fd817e1-8a66-5b7c-8f35-a0d11b3492f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake-world.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake-world.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff1f510-f3a2-50b1-8218-2ac23dad4990","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake1208.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake1208.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de87f16-db7b-5181-be7c-79edd133c23c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake1305.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake1305.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--413eda18-da7e-51b0-8f83-7e86d51252ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake1307.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake1307.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f55c11-bcef-5cdb-abd6-db820ea29e72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stake1401.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stake1401.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83e3d13-a943-5685-927d-b4f46144d32b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakebenefit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakebenefit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7a4903-4b6e-5236-aa22-f6d61ff4cca4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakecapex01.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakecapex01.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0470b244-9b1f-5c04-bf08-44022ebd611c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakecapex100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakecapex100.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cc364cc-ecdd-5980-aeaa-14ce279031b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakecapexxp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakecapexxp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2916f53-00f0-538c-a76b-16f4f0b522e7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakecontest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakecontest.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f94880e-96cb-5abf-ae98-cd448136c71e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakediamoxfin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakediamoxfin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc260e0-bf94-53d0-9fc8-fc706dde1c79","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakediamoxhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakediamoxhub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ab0ed7-dd35-5945-86dd-12f73058e6d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakerain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakerain.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c17adcd-d0ca-5c89-a0aa-feff5b63ea7b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakerow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakerow.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--300c76de-9271-5e44-9d3c-0e0c33d7f25e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakesboost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakesboost.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a851826-520c-5ec8-b227-2ffd5e7d1c91","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakespromo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakespromo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857001e6-dac2-5a80-a05d-1bab6314abb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: staketreats.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'staketreats.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65320fad-fef3-5565-abd4-563455fb4820","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stakewagers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stakewagers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a1751d-3102-5d17-a40c-bf5e629c1c09","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stampfordiscount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stampfordiscount.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0480543-7073-5948-b5ea-6bfea3d773fe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stampforsale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stampforsale.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--247c4b3e-dd25-585c-b924-faeb22525fdd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: starknet-bridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'starknet-bridge.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--feecae50-33b7-5999-830e-19ac2d6b0a82","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: steakhouse-financial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'steakhouse-financial.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dba175e-3362-5506-99d0-61d36cfb6ba8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stenocaz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stenocaz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--822ec465-26e3-5e5e-bb27-1216532b2a6f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: steroids-warehouse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'steroids-warehouse.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5c47025-a8be-56c3-92bb-84afa8f6ba22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: steroidsquanta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'steroidsquanta.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ba0bc1-8aba-5c2b-973c-b6f7960a69e9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: steroidwarehouse.sale","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'steroidwarehouse.sale']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdfb45c7-ddbf-5c3b-81f5-25096d3c28c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stop-lohotronshiki.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stop-lohotronshiki.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3ce6dc-80be-577f-bbd0-4e620e60cbe7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: stream4fun.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'stream4fun.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4a267c-926f-5c44-91a4-5804c9e37a72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: streamguin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'streamguin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fcd1db7-529e-5d6f-9fc4-74578c24f0b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: suagex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suagex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f9ba79-f445-5a26-ba44-a597b6ef27a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: suanox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suanox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cc5e996-3583-53f7-98d9-1a5381ab9795","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: suazox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suazox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9c4507-156e-5619-aaf3-ace70440d71a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: subowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'subowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5655f66d-5f83-5be2-89c6-7131813c8b78","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: subzerodirol-1.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'subzerodirol-1.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34ffcb25-0a97-58cb-ae22-e791ea020c41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sugegamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sugegamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--053bdc70-de1e-5a99-99f5-8d84ff654c65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sui-lend.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sui-lend.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9653cf4c-b11e-5dc4-9dd5-dac2606cb672","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: summitspins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'summitspins.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a300e4e-25a4-5214-9c58-26b4c14bbee8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin176.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin176.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1036e1-ac64-5f19-a710-34ab0a1743a6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin178.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin178.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa45d80-6b05-51c0-98b2-e8ca3a150312","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin179.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin179.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f918dc6-3bb9-5498-b256-2c89825c02ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin191.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin191.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f89b94a-c424-5c1b-9761-245f798cb98c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2028.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2028.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc029666-cd36-588c-b9d7-2dab9a1a8d8b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2031.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2031.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8dfb2d-bf83-561c-b40f-d5384d223bbb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2134.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2134.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--700ac80d-6d67-51c4-8eca-cf233f00181b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2135.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2135.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ea130e-4b6f-5dbd-9ea0-a9c8033b70b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2179.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2179.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eae7d66-8c6c-5aaf-ab91-e7ab26ba5d72","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin229.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin229.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d6a4be3-394d-5a15-870f-05748a0917a6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2319.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2319.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f53cabf-eee3-5be6-a01e-ee46ce3d920b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin2842.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin2842.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7fba50f-b410-5d52-897c-99d596195c66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbetin835.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbetin835.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dfe3d2-48c7-5a71-9047-f58a93d78c3a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbridge-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbridge-app.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2b6e18-bb45-5e69-b3e9-8bc7ed2223e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: superbridge-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'superbridge-app.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b3649f4-fc2f-51a7-b4ce-9a2ae03855f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: supersmokes.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'supersmokes.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0caaba74-56e3-50e7-9ca5-b2000d0eaf61","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: susanmariesagan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'susanmariesagan.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9bc1778-b970-5d98-b592-ae62726c7b8f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sushiswop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sushiswop.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8582663e-aee6-57a9-bb21-421f9892eeea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: suzawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suzawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb3b689-3fb5-5338-a630-7d9abfbc7812","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: suzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'suzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0575800-ec90-555c-92e1-71931de91abe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swap-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swap-trust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a24f2b4-f1f0-5076-b221-92e478f76700","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swap-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swap-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f106b75a-282b-5b07-8f99-4bb29970867c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swap-tw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swap-tw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbce5d03-915a-5b4d-b09f-8f20139d9d3b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swapx-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swapx-app.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb04f07b-3645-59e8-9855-4333a8b40e24","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9460cc-bde0-5cb7-95bd-e4955af346d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swdwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swdwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8df0a0d-b0e8-5c0d-9afd-5c249cc20b34","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sweet-bonanza-slot2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sweet-bonanza-slot2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf2fe23-7860-5cf5-bb4a-86cfd4475be4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: sweetygames.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'sweetygames.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59b4e50-d43a-5535-a29f-516681d1dfd4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: swisssarm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'swisssarm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8085ece3-b34c-5ba7-8d47-827e4a954d3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: symbiosis-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'symbiosis-finance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e3b9fa-0287-5700-977f-ff9af34964a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: t-settings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 't-settings.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba8e44e-5597-57d7-b1e1-8688a6059a2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: t-sun.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 't-sun.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8ab0af-653d-5f10-9ef5-8308e8615bec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: t84a23t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 't84a23t.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--30db0415-22ac-57cf-a847-05c08b2d84a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: taefux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'taefux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--420499e8-c6de-59f1-b665-116ef039ee55","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tahowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tahowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1c788e7-ff8e-56aa-bf77-c46231150ffd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tangooro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tangooro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbdf2d8-7b63-554a-b412-6f1994e4aafb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tanodex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tanodex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a0412ee-77bb-518f-9d67-53e070ba0f2e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tanx-fi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tanx-fi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66dce29-a376-5a26-8a0e-1f1668a5f67b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tarafbet-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tarafbet-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1b9b99-bfe2-5cb3-a0e8-5e83f9b7e4e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tarafbet-hepkazan.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tarafbet-hepkazan.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9830df1d-e682-5b9f-84fd-f00eff28dae0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: taraftardenemeyayin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'taraftardenemeyayin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--02f2d39e-fb36-5a6a-9579-466313d4f946","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e51975e-0ca4-5bab-a49a-5672b1bf4ace","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tatomy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tatomy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99cc6c20-b249-5290-bb45-d07c3d73a18c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: taumox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'taumox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--897ed0de-7273-56f4-b11e-dadbc9a6596c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tauzux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tauzux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbd39ea-b962-5192-8dd7-81196f92ce4e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td-assitance.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td-assitance.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--75746cb1-215d-5025-ad3c-7f89cb295522","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td-devicevalidation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td-devicevalidation.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--14bd0cc2-f5dd-56ab-aba8-88126cadfa52","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td-reset-myalerts1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td-reset-myalerts1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11ff27b2-41fb-5774-a477-3f668193218d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td-securemyaccess.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td-securemyaccess.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a24c6e-c148-5731-bb3f-5f04f0a4091f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td-setallmyalerts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td-setallmyalerts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--505dfb2e-e805-52a2-b40d-9a5f009ba53f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: td2sv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'td2sv.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537735ea-d20a-597b-b17f-408badb2f6bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdalertspanel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdalertspanel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc350a0-9faf-5de5-b079-01562ed57eb3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdeasyweb-security.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdeasyweb-security.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b77277a-8af0-5af6-af38-3fc6c5341f8b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdeasywebsupport.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdeasywebsupport.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d38b22-fdb0-5bbf-bb1f-b2a0ce30a7a3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdhelp-businessweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdhelp-businessweb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe6c4ccc-8277-52c5-800a-847ff8b944cc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdsecureaccess-recover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdsecureaccess-recover.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43db931f-324f-51f7-8e7a-d797a5c56677","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdsecuredresolutions.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdsecuredresolutions.help']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab71ca2-cce2-5158-a6e8-affc280fa031","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tdsecurevalidate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tdsecurevalidate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b33001-3551-52f3-9ff5-0f98cbd5bf7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teacex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teacex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1618baf-bb9d-5114-a009-fa52d311e13f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teadux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teadux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37074b3-7bdb-517b-95e6-e94833e786d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: team-finance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'team-finance.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d79f48-27ba-5916-9a1d-6904ea266075","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: team.sarl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'team.sarl']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce127bc-974f-5478-9737-5785ea1d292f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teams-livemeet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teams-livemeet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6467c83f-efd2-5957-a286-7560021cb793","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teavex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teavex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf750da3-4ca0-57d0-abbf-a19507b3d195","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tectonic-finance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tectonic-finance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d3d5fef-f359-57c6-be7a-cc7a44b90c37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tectonicfinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tectonicfinance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f8e7656-1e3e-5cf6-8320-0bda17bda4e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tempobethizli2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tempobethizli2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--992b4ef5-b875-5e5e-8f11-495aae5377e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tempobethizligir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tempobethizligir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06beb162-194e-55f8-98ce-21a0d0b0dcc3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tenamex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tenamex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ccae0c-ab75-57ee-817b-38ae5078bee8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tenerifeaquapark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tenerifeaquapark.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aebc7da-b6b9-5519-b29f-bfe2ece3475b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tenpoly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tenpoly.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df2ba84-4607-5bdd-b4d3-fb8ca8fe8952","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tenshitv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tenshitv.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44c6bd24-84fb-5f28-8523-9033715697f2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tenzvault.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tenzvault.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67b490e-2202-54f2-89bf-3cc9cc6eb158","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teosbet776.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teosbet776.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--770c9fe1-1c9f-5e39-abd3-a838356c19b3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teozex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teozex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dccef1cf-3550-5bc2-9000-b65d34a8f539","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tepovex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tepovex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97481b18-3203-56d8-a18e-52d44fb8f136","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: terazex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'terazex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6722a3-ff45-5f69-a196-67b4f926d93d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: terogex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'terogex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f71f5f-cd82-530f-92ee-27ba6cf69c06","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: test213232323.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'test213232323.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--033deb71-b671-5567-b070-775ee1c63664","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: test777777777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'test777777777.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3cfb02-83c5-5963-bf41-cf66601ecc95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: testfro2882828.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'testfro2882828.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7728553a-a545-5dff-ab36-27ca7a8c0e8b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: testny.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'testny.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9dfafc7-264c-5e2d-9771-5e82f0e52b75","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teucox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teucox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d278db5d-19e8-5ed4-adf0-d7cbc5d1d1f7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teupox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teupox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7abfc9c-a662-5970-9e81-d796b0791abe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: teuzux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'teuzux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a7e4453-1788-5c6b-a91b-a2b296c45691","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tevrox.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tevrox.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--08337bba-3dee-53cf-b328-71071bb91ea4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tfcpeptides.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tfcpeptides.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f048cec7-e6e6-5edc-951f-bdb69d55a9d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tfgmenkuldegerler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tfgmenkuldegerler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a4aac5-a8c9-5600-8a4a-73bedc9bfe59","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tfgmenkuldegerler.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tfgmenkuldegerler.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c01a480e-50b6-5c03-ba85-850298ee47ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tfgmenkuldegerler.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tfgmenkuldegerler.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c44d1c-2ce3-5cc8-866b-0782b1709ceb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tgrn3bkogrn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tgrn3bkogrn.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3c23c09-16e1-5603-bce2-048a95cbca07","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: thechidocas.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'thechidocas.cyou']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1752e8be-c1b2-54fb-8ad7-68c0eb2801dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: theglplounge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'theglplounge.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65488975-8901-5a4f-90a9-9de30e3f69e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ticketeaster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ticketeaster.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8fe3526-7912-5dfc-8857-a5f19b1d6ac4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ticketscaster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ticketscaster.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2220a38c-a387-5de6-9ccd-e302ee0b86ea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ticketsukgarden.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ticketsukgarden.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17259468-fe66-5bc3-b9f9-c659e3b71a2b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tigerflow.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tigerflow.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--666bd0c1-cf6b-5629-b9d4-74cd98a7c143","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tikla.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tikla.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf6d45f-5d8a-589f-9146-bc0f91b90e69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-erisimadres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-erisimadres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67dd5fb3-55be-5208-afe7-aa673ad3ee0b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-gunceladresler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-gunceladresler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a524657-2d5e-5fbe-8c93-bd2cdab5a6b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-offical.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-offical.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b1e472c-1cd8-5401-afe3-7e606928cb62","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-orjgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-orjgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f26de5-55b3-58d6-9b52-6fb4d47585d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-serigiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-serigiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a767e4bf-91bd-5cb9-87c8-89d11b2c773a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet-tekgirisler.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet-tekgirisler.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0deef0-c3c9-5f9b-8bdb-b1f47efa3dcf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tipobet7204.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tipobet7204.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c180e1-a8cd-5a38-ac32-4f0f6995bcff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: toahax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'toahax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fcfa93a-a890-50dc-a76a-6fbd3dd1e663","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tobuyfinasteride.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tobuyfinasteride.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec914d12-27c6-5493-9e06-11830acf88a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: todayfreeaiimages.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'todayfreeaiimages.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfba519b-bc57-5c9e-a3a1-3b34be0fda2f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: toepox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'toepox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2332e142-7cec-5bb2-9d2e-5f92a1c502e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tokenhubportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tokenhubportal.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--418ab7f4-8455-59e8-80c9-868a3b9c4978","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tonevex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tonevex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c9c428-84fd-57c7-8bc9-dc42e14e8af9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tonewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tonewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ee3deb-c4a4-5cd5-a5b0-e10f6335765c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: topawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'topawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f0a1c0e-85c3-5d85-96af-3088c73bf805","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: topodamax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'topodamax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e267b77-1dc1-5ac8-a077-06b49f56ca1b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: topslotsx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'topslotsx.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--93971db0-6d2e-53c5-aa32-ef6f9fd321b4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: toryburchvipsale.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'toryburchvipsale.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54be6ddb-1281-551f-acf8-961977d3dbcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tosowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tosowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--768fa723-2fa8-5c00-bad7-1ec4c9fcda6f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: toto911link.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'toto911link.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab03877-e253-5172-b36e-bffb911c6af2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: toucux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'toucux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e03fcb-de57-5b2d-a99e-85d82fa18da8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tovawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tovawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1828ab0-b660-5786-a308-1e4709c317a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tr-giris.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tr-giris.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--178b5aa6-efb0-5f95-96d3-823a62a3ba9b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tr-link.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tr-link.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68fb706-838b-5ebf-9726-0b2ad4b4644c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tr-site.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tr-site.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6b2a61c-2b92-57b4-ba0e-583250122387","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tr-sitesi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tr-sitesi.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--748ae4b5-3291-54ae-89e5-84c0c35dd06e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tr-sitesi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tr-sitesi.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5967b498-1332-5ed9-9521-705baf2b0128","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trackin-go.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trackin-go.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78359d4d-857a-586e-99ca-ef7b22275b05","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trackin-go3.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trackin-go3.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95dcc0e5-83af-5ccd-9e0f-744bdb8c8b93","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trackin-go4.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trackin-go4.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab2dc09-2a2a-54a4-a343-2f7f0395639a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tracking-go2.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tracking-go2.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84cb29be-3f44-56d0-8be6-63c9b4d42176","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trackingo8.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trackingo8.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f676f769-77b7-5367-86e0-00449c6140ab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trading-plus2026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trading-plus2026.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2995d8ec-7c18-5fd8-a963-4d7436771305","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: treasuredairy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'treasuredairy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9aeaa82-50cb-55bb-9092-21e847bc5e4b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: treyspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'treyspin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16c289e9-ba7c-5efe-872b-be674ddfe526","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tripwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tripwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60f935e-33b1-5edc-9617-bdfd5f45f241","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trmeritbetturkiye.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trmeritbetturkiye.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41347184-b6d5-5010-ab26-6e98786fbc5a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trmeritbetyeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trmeritbetyeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1dd8053-a9a6-5b20-9f48-7fb6dd278788","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tron-exchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tron-exchange.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf6e31b-1017-5d2b-b0ff-e9a5e0329abd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tron-trading.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tron-trading.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c490cf31-8f2c-58c6-8ae3-6fae04a87d6f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tronbank.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tronbank.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41dbdda-c93a-52a6-8d9c-2478cf0e7bb0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tronifyltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tronifyltd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf5d4c7-0e3c-545f-acfb-739b1688a1f4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tronsave.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tronsave.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc07f66-fb56-5239-96a7-df879ef06c65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trueusd-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trueusd-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--208d0dd6-c0c5-5c3b-ac5c-e8d945917475","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: truist-onview.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'truist-onview.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b2dd72-11bd-5dc9-af22-9ec754e712db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trump-amerika.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trump-amerika.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efdd307a-8dd2-5e0d-b5c8-56e30b1eb432","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trumproll.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trumproll.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--968097a3-1b7b-5f67-b499-69b98a4fbd63","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trust-dash.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trust-dash.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d3394b-63c5-59cc-bf8b-539cfc9e2761","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trust-kart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trust-kart.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e02499f-8222-513a-b727-2807d6cbe23b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trust-stack.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trust-stack.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad723ef1-07d4-5f70-ba8b-bc5b79dc60bd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trust-tw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trust-tw.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff2c035-b4f4-53f7-9891-c900bae089dc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trustbank-capital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trustbank-capital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6be82a-e6d0-583c-92ae-acc16fa7c3bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trusted-premium.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trusted-premium.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acc856bb-c9df-52cf-a4f1-5caf34f64481","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trusted-sun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trusted-sun.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d92c495-be39-5881-8c38-902cc76ac0a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trusted-sun.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trusted-sun.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec275d8-f120-5e95-be15-f09aa5199001","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trustprojectcard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trustprojectcard.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfeee453-d89a-5160-9126-6b5f139fe3ef","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trustwallet-digital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trustwallet-digital.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01241859-b0ef-535d-9da4-ebea1fb0f484","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trustycc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trustycc.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1b1b8bf-f5ea-5441-9560-b8c3ba64c1a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: truwex.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'truwex.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d7d2de-c6bd-5814-a767-e710c1bd04eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: truxlim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'truxlim.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f632dc-fbe4-5a69-947d-5e4b272e1db3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trwau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trwau.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dae3df1b-0ba3-5f0e-ae62-47f921a505c3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: trweu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'trweu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8f03981-7f0d-5f19-92d4-3e2ac7f3ca15","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: try-polymarket.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'try-polymarket.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c535e7f7-c4eb-50ef-9ce3-5945cccb0682","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tschallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tschallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73103e8-bde0-5130-bb9d-b70cb22cb064","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tuabax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tuabax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3986640f-1611-5921-8521-dd8c6b6272b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tuapux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tuapux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af15e958-596f-5ae1-b6fb-cec0df92de7c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tuerax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tuerax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--62c1962e-75cc-511b-a938-696727825754","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tukemo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tukemo.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa04bf6-f603-5423-8870-1452634ecc1e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tupewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tupewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d0a049-bbae-57e1-8fd9-823de688f052","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: turbojack.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'turbojack.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffbf41ca-3602-511b-9106-d89cd1739095","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: turbowave45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'turbowave45.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2250e9d5-cb7a-5b89-aef3-873e32419631","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tusdswaps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tusdswaps.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6e3543-d9d1-5d00-b710-87817fd0bde8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tusowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tusowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b0c20d-cca0-548b-97b2-92d91ddbefaf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tustwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tustwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6107aa-6e94-5f2e-a297-c6ade2dc9484","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tuzawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tuzawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--81eb0026-2d04-5c09-95f3-0590025d3f6b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tuzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tuzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f74c61-78a4-50c3-a130-6d124e1234e8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tvoimarshrut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tvoimarshrut.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea20580f-9774-5805-b0fa-7cf5150c2402","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-base.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d7c92b-f050-55e9-8663-eeb4cc7edef0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-dash.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-dash.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d0694e-f241-529c-8314-634569a62efb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-loop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-loop.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc22afe-b8a5-5e45-8934-1ac0774db8b9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-mint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-mint.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--40e72e1c-026b-5ada-b777-30afb7f2ebc2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-mint.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-mint.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dbb6bb9-4877-5728-a579-b05fdc944318","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-pixel.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-pixel.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e285907-2a27-5598-a593-30aa28a86dfe","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-stack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-stack.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eacfb01-2041-5c1a-b53e-1eb17002ee91","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ed461e-437d-51e3-81cd-0f94e996a4e9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-trust.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa0b6f3-ff49-545c-b378-ea03b2059b67","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tw-wire.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tw-wire.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--034e06c3-a2a6-5766-8b80-ca7fa038bc0e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: tydro-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'tydro-v2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--936f576d-7fef-58f2-8a78-13e11adb9053","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uae-dubai-chamber-payments.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uae-dubai-chamber-payments.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9632fd9a-49fc-5a39-be66-23089dd73f47","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uae-dubaichambers-payment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uae-dubaichambers-payment.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b362803-1ec4-5771-9b2b-704682257ace","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uae-revolut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uae-revolut.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--34336587-1a3b-5f59-9e33-d7c354142043","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uaecardeperks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uaecardeperks.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe83fff-0a41-5759-a855-7eda5d710bb0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uaedeliverooshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uaedeliverooshop.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f0b67a7-622c-5989-a465-9e3cf7e9f739","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uas2-cams-scotiabank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uas2-cams-scotiabank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e30305-db67-5775-9b95-765bd99028d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uas6-cams-scotiaconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uas6-cams-scotiaconnect.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc352b9-9d08-5591-a9c3-ed8eee465a83","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ubeswap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ubeswap.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--449cad6c-4eff-5626-ae07-d76264aa083a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ufcslots.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ufcslots.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca5704c-6f1d-5809-8314-a2531d74245a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ugonex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ugonex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--509661e8-f432-5b39-b679-984fc339e641","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uk-nexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uk-nexus.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a4e3cd-0791-5356-88c4-620c969cc158","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ukbinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ukbinance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ac1d97-adbc-5f3a-8585-87d2beeb9fee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ultrabet-egiris.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ultrabet-egiris.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6679c165-f9bf-5945-bc59-66e8f2523a69","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: ultrabet-yenikazanc.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ultrabet-yenikazanc.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--833affcb-32c9-5dcf-ad05-2d68ade3758b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: unitedstateverif.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'unitedstateverif.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--03bb9766-e963-5e28-b70b-cfe86b172982","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: unlockmoney.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'unlockmoney.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--522420ba-9e10-5a7f-a10a-3e4f323b976a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: updatesession.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'updatesession.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67f46e70-92f5-544f-af79-b187f770f3b2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: upeton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'upeton.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71a9dea-2913-52b3-ad18-3599fcb72742","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: upratex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'upratex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dd2075d-c4c8-5dd2-8650-a48d1dee5419","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: usddswap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'usddswap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e012b6-4c5f-5e73-8bf5-e5abb4465e55","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: use-felix.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'use-felix.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2133bd6b-3b5d-50ed-ac87-37d48943c7e3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: uxchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'uxchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--54a05714-4038-5d5e-839e-9195dfdad535","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: v3-morpho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'v3-morpho.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fb26655-e012-564d-9bb1-2f24842bbdac","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaefux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaefux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f0c5383-db08-524b-b381-9b783acb807b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaekex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaekex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a98fbfec-6595-5c64-839c-67e43e05375b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: valley-auto-sales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'valley-auto-sales.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e222e63d-67a6-522d-8876-32790281c4db","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vancityverify.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vancityverify.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9697e2-b58b-57f0-aba1-c706b9a6d9a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vandamining.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vandamining.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a0ff72-1492-57a6-9685-f81e6089f905","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaohux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaohux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a13c7e-ca4c-5bbc-b744-c177dd0ae764","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaokox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaokox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--78d1bff7-54c2-559e-bb49-5b876da6c9d3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vault-hustle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vault-hustle.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d196408-95d2-50a0-ba55-0ae08b34bed3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaulto-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaulto-uk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c02a1c-cf75-5e0e-a679-29060e5ded47","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultobanking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultobanking.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--af92f309-5438-5cbe-a562-9d44b58c0022","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultofin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultofin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5ee961-3c62-500d-a52b-8d246d4b72c4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultofintech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultofintech.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27950bc5-7ad6-5441-866f-358f793b45ae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultoltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultoltd.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebee185-160e-593a-a6d2-33130550ae12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultonews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultonews.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d804154-2d05-55e7-87bc-05c475801f74","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaultouk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaultouk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12c4959-28dc-5537-9305-874b9aa87ac5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaxtaflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaxtaflow.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c73289-a809-5879-b6e5-8e1ce5763470","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaxtaservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaxtaservice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fed1649-baca-5f67-aa2e-3803affafb50","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasino1912.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasino1912.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd1cdd1-14a0-56ba-9fd2-111a5cb22ff8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoaff.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoaff.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b3a363-8f32-5478-9296-62fb2e14ebc8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoaff2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoaff2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da1e02a-e3a8-5d7b-bb5d-1d087391d010","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoaffilate2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoaffilate2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b83abe40-5813-5f36-b1bc-ca41f1ab54cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoerisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoerisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b983be-9015-5048-a7e7-1b94bd05a94a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoerisimi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoerisimi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--567551d9-004d-504d-b77b-edd87f9f8aa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinogir.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinogir.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d17326-5794-5b34-a0f3-c18782c7ba35","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinogiris27.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinogiris27.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--364c032f-541c-59a4-8998-a0cb2f681b8a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinogirisleri.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinogirisleri.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c7d6f9-15e3-5270-b035-8507a78e8fe8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinohemengir.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinohemengir.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a840ab66-6801-5375-a9de-d233ae22eee4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinohizli.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinohizli.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--80f74913-2b72-5156-b019-16597a52ea95","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoresmi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoresmi.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e84e030-5a5b-523a-a4c7-e5a2936cb84b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinoresmi2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinoresmi2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--79df87e9-80c1-5d03-b549-e8442fa7c782","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinotrguncel.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinotrguncel.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a83d29a-8ace-56fb-801f-cb7fd20559cb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinovip.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinovip.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c0aab1-d5a3-5e70-9679-d6f84d6ef708","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasinovipgiris.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasinovipgiris.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcfd9cfb-ca56-5648-91ca-b58c5dad0cd1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vaycasno1114.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vaycasno1114.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e5b5ad2-4e56-5b0b-9fe3-f29fd0f2c4ae","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vazowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vazowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6134811-159b-5168-bdce-fb4d1c93ecb5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vbnsajiqlas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vbnsajiqlas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e70c822c-ff0b-5b50-91cc-74b61ebb105b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vegapoly.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vegapoly.xyz']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceec7a74-82db-5193-8aad-97ac47a69555","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: velkaroxy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'velkaroxy.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--475488ec-3a50-52d9-8a90-d9135248d970","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vellum.fund","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vellum.fund']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e234505-a58b-5363-9a7f-faf1dae94acb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: velogamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'velogamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcfaa575-d65b-5fd4-b1f9-de34a98c9719","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: venafex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'venafex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf56594f-2335-5d67-84b1-5ec383e824c6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: veniwex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'veniwex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a113748-88d1-56d3-8481-69f4b7ebfe66","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: venofinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'venofinance.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f39aec5-7adf-5ade-be28-c7c3d1f588a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verabetgiris2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verabetgiris2026.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e52852-1605-502e-bd1e-1d76fe00e8e5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verification-securite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verification-securite.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9ed992-605b-53a4-a35a-728530b7a667","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verificationform-myscotia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verificationform-myscotia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70673506-cad2-550a-be2f-087f10fc2cda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verify-auth-cloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verify-auth-cloud.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a423e4-938c-59e3-8278-737b26ded427","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verify-find.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verify-find.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bed3d21-27a8-50d2-8b5f-95dbe01bb6d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verify-server.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verify-server.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8eb3a4d-c04d-5117-9e01-e6e37213fc65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: verifynowportal.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'verifynowportal.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d992b18f-1c34-5183-9ce9-59cb9ac177b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: veritaglobal-breadsettlement.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'veritaglobal-breadsettlement.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23fce1cc-6314-5619-95eb-eecc760f2753","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vesenox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vesenox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab0ea0cd-b29b-52bb-b2f2-8de185ff9692","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vesper-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vesper-finance.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5737308-2f55-56e4-8e2e-de2802a47e76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagra100mg-online.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagra100mg-online.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b5f270-bb7d-51f4-9900-ef816d5e161b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagradoseusa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagradoseusa.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--949921a9-2088-51f5-a387-1ef96deb0994","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagrafreetrialoffer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagrafreetrialoffer.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d96fb6-c6f6-59ea-bbce-d10591314661","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagrainfo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagrainfo.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--652441d3-05be-5536-877c-b052f4a933bf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagrala.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagrala.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fdc18d2-2e69-55d7-8042-6ef6cbdfe67a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viagravpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viagravpro.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccc55cc-af5b-5e14-bf23-5b967d03d9eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vichpagereg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vichpagereg.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc4c0300-0955-530b-b83d-41b88b1e432b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: view-horizons.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'view-horizons.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a7a094-b1ca-5bae-85d9-d110ac39bdce","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: viewyouralerts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'viewyouralerts.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--89618c86-44ad-5108-a5d3-3e97159225c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vikingbet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vikingbet.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--196551e4-8a5e-5280-8a25-ab1eac392e37","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vimewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vimewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--47814982-e57f-5f06-9cd3-0617a813c49a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vipadresingiris10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vipadresingiris10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a3b2dc-fef9-555d-ab9e-5bcf0064c1be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vipbets10guncel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vipbets10guncel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d3d738-c217-556a-9016-fddaa6c78c43","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vipresmi-guncel10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vipresmi-guncel10.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4359046f-7961-521d-9afe-793fde0af858","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: virunes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'virunes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6055b92-f59b-5405-87f2-e4059d332e8e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visioncapexark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visioncapexark.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--463f4ea6-83d5-5ef7-a6d5-4c9424d2eb41","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visioniplexhex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visioniplexhex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--873b29da-26a3-53ec-a6cf-84306f6adaf8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visioniplexopt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visioniplexopt.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10816511-8955-5129-aa26-856dc9874755","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visioniplexxp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visioniplexxp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a5767ff-69ef-5511-b430-d81efe043800","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visionlasixark.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visionlasixark.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9048b4dc-29d5-50a2-a1e6-2d1c479b244d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visionlasixpip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visionlasixpip.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda2b964-887a-5963-aa6f-3cd602355250","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visionlexipro500.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visionlexipro500.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e030a5bb-e14a-5bb4-b633-5f340db88be8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: visionlexiproxp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'visionlexiproxp.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b60a06bf-5146-509f-866e-e452d6e231ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vitofex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vitofex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--306959bd-3c8e-5262-9255-9d1b2fb237bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vltx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vltx.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7df6e802-2cc3-529f-89be-e8bf9fdb0ec2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vltx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vltx.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b5b100e-8ece-51e8-a7c7-f9bd1094d419","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vmi-21-07.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vmi-21-07.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26204926-5de2-5d76-804d-9a578eb5e1a7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: voba-investment.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'voba-investment.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b709a70b-5edb-538d-8d39-5c4f6597eb6a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: voevux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'voevux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc546861-81c3-5c46-a3d4-9178f5ae9383","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: volazlotddk.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'volazlotddk.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eddb6c1-9aa6-5814-9919-2f357d032148","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: volovon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'volovon.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--aacbc8fe-afcb-50d5-91e6-651708243392","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vorgang-amex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vorgang-amex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c907ab8f-9318-5bd8-a1cb-e30e0b287661","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vosturera.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vosturera.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1400fa03-a2ec-5d8d-a665-d1cd7e7ad75f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vougux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vougux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c653ca8-11f0-5ce5-8084-dc45b2f04ab4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuafux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuafux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--097922ed-e6d6-5cc1-9aa0-aa7313fa8c22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuahox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuahox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0252c76-f15f-5202-aff7-83b13a5753ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuapagesu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuapagesu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2ceab2-d6ff-5017-bc17-3c2b689c07e2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuopox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuopox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33767bfe-acea-5f63-894a-ec8acb740bf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuowux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuowux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc44dcd-4fac-5a7f-a126-dee1fd817287","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vupageinso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vupageinso.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d738a0-2131-51a3-98cd-7a362f6e406e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vutereck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vutereck.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd04064c-f431-5d01-8cff-f81b17917aa9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vuzewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vuzewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea368ac-3809-5eff-8a07-9dee70d65852","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vvs-finance.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vvs-finance.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--613c59e0-8c1b-5059-8902-75cffddedddc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: vyrexgamb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'vyrexgamb.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e97eb231-16f1-52c3-8e1b-24fbab131861","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: waecux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'waecux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2272ab96-b150-505a-aff9-51337db9905b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-base.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-base.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca81107-512c-5b94-8264-a04fd1c55b51","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-confirm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-confirm.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33a089e-c6c5-55a5-bd85-a2f21bd66695","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-confirm.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-confirm.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24361f4c-3ead-5e36-9816-6b9551cdbc73","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-confirm.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-confirm.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4f156f6-1fb8-5817-a140-69f31a3bbcab","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-premium.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-premium.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--36a56532-4844-536e-9034-64051ce1d175","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-sun.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-sun.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bdbb03-a726-57d8-b2b1-e5563bf54a57","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wallet-sun.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wallet-sun.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--42cc35b0-1723-5496-848a-b278393450d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: waosox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'waosox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ca3f36-a185-58c9-9b3d-4957bb9974eb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wasobin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wasobin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9eeb956-e6cd-5843-bd81-79ab55647147","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wasowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wasowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c3c274-30a4-51ee-8341-2dce8a3e1cda","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: watanex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'watanex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4947ff-e280-599b-8160-25ea65386bb0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: waucax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'waucax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d489ebe-a940-5cc6-8ab9-6f270c0915a1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wausex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wausex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8680bb4c-4de6-58d8-a76b-d5a09a742a65","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: weakox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'weakox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a6acec-c1c5-5869-9a38-1b3e0ec05f3e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wealth-deutschebank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wealth-deutschebank.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--032c2281-da14-56c4-ada9-5970d00aa682","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: web3marketplace-offers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'web3marketplace-offers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04042fa-b575-5329-a93a-ebdd5e850865","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: week-pet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'week-pet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--65bbf756-588a-56f1-85c5-36df53bd5c4c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wellnespharmacy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wellnespharmacy.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c41c9f-5567-5fb4-ace6-5bbf6e1380c5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wells-authenticate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wells-authenticate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--636978db-4d3e-5327-bb2d-716b07304eff","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wellsfargo3dsecure.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wellsfargo3dsecure.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82439ac-4389-5b51-80dc-8b5e07399efd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: weocax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'weocax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b2d392a-d36a-5d5d-8950-965c4c748868","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: weocox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'weocox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--812b0845-4631-5d49-b22a-b2bd729ab7fa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: weropex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'weropex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a07f2f-14f4-55b4-a2b4-f6b885753116","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wesobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wesobet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0e7343-468f-525f-8784-ed420f44d3a8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wesobit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wesobit.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b06362-4c9a-58bb-ba50-5d019ba5dad2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: westcoast.zip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'westcoast.zip']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6379b8cf-75f1-52f3-a1dc-04437620459a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: westlaw-court.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'westlaw-court.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd776dc-207d-5b14-b8d8-ca2d1c6a70e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: westlaw-review.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'westlaw-review.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f7d7e6-aeb9-5506-9909-0e9615f5881c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: westlaw-view.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'westlaw-view.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f771ecfa-2072-5591-8a62-45ab2a3d01ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: westlawprom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'westlawprom.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32d2f52-c0c9-56a9-94fb-2735b030331f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wetmox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wetmox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0fd75fe-e67d-5c67-a61f-65e2de9b219e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wettora.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wettora.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--857c0db8-4198-5025-8a0f-3767e531ca8c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: weuwux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'weuwux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee7e37f-98e0-5fb1-96bf-a0b40d1d302d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wezowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wezowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--001c19ec-f1b0-5a5a-84f7-9876a59310d6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: whirmix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'whirmix.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0545473b-ce52-50dc-a899-b6d84ea6eff0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: white-bars.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'white-bars.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e0605da-32ad-5157-91a0-a7bd40e8ea0c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wiingstops.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wiingstops.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--852168e5-77a4-5158-a332-10996c274906","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wikitubes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wikitubes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--494bc46a-04ac-5d3f-883a-c3c19962e94c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wilcardcity-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wilcardcity-login.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e28ca78-d14f-5de9-b94a-3388b6ac4468","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wild-card-casino-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wild-card-casino-login.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb5260e4-2748-5569-958d-e1a268169b01","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcard-casino-log-in.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcard-casino-log-in.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3a0af4-8b4b-57a8-9d51-c2d5d0cbaf01","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcardcasinolog-in-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcardcasinolog-in-au.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--709e0387-9469-525a-91bb-05b82b3045d1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcardcasinolog-in-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcardcasinolog-in-australia.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d9844a-4f80-5ffb-91e2-3a858373b245","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcardcasinologin-australian.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcardcasinologin-australian.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--269acc31-5df5-5f44-a91e-f7bf56b6df31","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcardcasinologin1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcardcasinologin1.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c5d8aa-1e7b-5b1b-aa1f-c5135e8d212d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wildcasino2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wildcasino2.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51211a0e-1dc5-5762-9186-646c05af5af9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: willow-plate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'willow-plate.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ca41c9-4660-5deb-89d5-b07bcf37b503","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: win-ma-chance-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'win-ma-chance-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed79eed5-6681-5605-8ae0-e8de86c4ea32","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winace777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winace777.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0238adaf-2d4c-5999-b61b-56f096606479","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wincas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wincas.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed8582ae-b3b4-58e8-a6c5-f9d8346a51c7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wincas.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wincas.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecc0b32-3ba0-5398-bfef-d9201f0c3194","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winmxnbet-mx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winmxnbet-mx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--132cdb8f-0c3d-52d1-b160-d64e655401c2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winna-crypto-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winna-crypto-casino.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b4ad2c-b62e-58a8-a7ed-9ec44ec8eec7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winodex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winodex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5dfeb1d-5d77-50ac-8cc1-889201d62b3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winoramacasino-login-au.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winoramacasino-login-au.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb854e8-8189-5c28-81ee-797aca4c8ef2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winplay.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winplay.cam']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96681708-2ad0-5abd-8160-41838d64b7c4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winpotbet-mx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winpotbet-mx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c78507-9cd4-5e9b-b2ff-c19556ef9986","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: winxbeterisim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'winxbeterisim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e316dddf-d823-5c61-906e-5141ec9ae0d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wire-trust.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wire-trust.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c63884c6-4338-5954-beef-0b329bc03d1a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wire-tw.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wire-tw.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41897310-0a0e-5aa6-a6a8-1cc8d3cfada1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wiseview58.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wiseview58.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--616dfbe6-afe4-5ec6-a780-0a8f69c82396","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wolfdice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wolfdice.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddbbf7b-c9f6-57a3-94f5-79fe4806febc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wolzabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wolzabet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c44172-c81a-558c-84e9-a083da1053a2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: woocasinobetnz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'woocasinobetnz.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21a362f-35d5-5f52-aaec-64c1c0d301ed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: woodtech.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'woodtech.wiki']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0830f0f-e03b-57d0-99a2-fdc77c196022","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: word-apps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'word-apps.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c77cadc-df59-560c-872f-5457edbebea9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: worldloan75.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'worldloan75.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4660381c-89e9-5ddc-be20-4104c5d733ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: worldpharmacyonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'worldpharmacyonline.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a715dd3-ce43-5777-bec6-65462e114b12","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f70168c-b01b-527f-b880-c1487b90511f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-amaviotravel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-amaviotravel.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa741fa-49cb-555f-ac34-ddda4697d945","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-gastro.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-gastro.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b27d90-d1de-5eb4-9884-cfd321e1ad94","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-hitboxgames.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-hitboxgames.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb1f914-1ef1-53e9-875f-5d6b90521374","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-infectionshield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-infectionshield.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--536f8c87-bc26-5a78-9370-7daf37c25634","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-nevergiveupday.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-nevergiveupday.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d42285-9e8f-5c11-b266-cb1b5eafc887","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-perform-better.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-perform-better.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3341848-03e1-5ea8-b975-2f916c4910c1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-scarreefresort.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-scarreefresort.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a13b3f-9733-5b92-a5eb-84feef456d81","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-southmooj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-southmooj.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--71214bab-d292-5fdd-bcf3-378a6570eef1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine-sydneyavspecialists.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine-sydneyavspecialists.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de863c2-bfa3-56a2-9832-ce29d8af66d0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpengine2-scarreefresort.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpengine2-scarreefresort.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3d1cb3f-bcf5-53e6-a5a6-6236261eee35","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wpenqlne.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wpenqlne.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea5c847-acd8-507c-9cbc-013d9d4d5aaf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wrchallengers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wrchallengers.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f0157a8-d8be-5360-8b74-c9f7f8dc3cf6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wss-analytics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wss-analytics.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f55fd6-9d85-542b-b559-0fc99eba708a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wsxvalue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wsxvalue.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e61b4d-2cfa-5999-8888-d999102e0418","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wuasox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wuasox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe792267-c771-5a44-96b4-0ddf88354643","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wuegox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wuegox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b7e706-cfff-5078-bfc6-4e7b44239977","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wuhanwanshengbio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wuhanwanshengbio.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ca6c5b-f083-5797-b9b1-92f7321f4146","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wuovox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wuovox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ba40462-7147-5995-8907-2335fb0b5ecc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wuxitides.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wuxitides.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c302e1ed-7342-541b-ad97-0db163e32ae4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: www-crtosroyalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'www-crtosroyalbet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e7e9ce-d7d6-5f04-99eb-19c1e3675db3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: www-radissonbetgiris.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'www-radissonbetgiris.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b65df7b-09af-5f43-a38d-90fd5ff9f2b7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: www-scotiaconnect-web.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'www-scotiaconnect-web.digital']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e533f42d-4d55-5beb-be1e-0851ccda6e32","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wwwbets10adres.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wwwbets10adres.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c6de50-13f2-5c41-9985-a2007ca59a0d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wwwbets10yeni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wwwbets10yeni.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ba9a1eb-c84d-5386-aea6-365afdf08b99","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wwwmeritking1711.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wwwmeritking1711.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1daf8373-4ad1-58dc-8b55-8864b2610587","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: wwwpusulabet1089.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'wwwpusulabet1089.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f74a95-6e9c-5961-b63d-e1aeaf56d82a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: x-code.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'x-code.sbs']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d067bb-0c38-5636-ba63-8300316b75b6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: x-stocks.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'x-stocks.app']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--088b2e8c-7e18-5ca1-bbd3-0aa150232b8f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: x5cas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'x5cas.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4c8599-de22-5d83-be16-33d5c30b3865","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xaawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xaawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--331a78d2-7669-5ed3-8836-d7d8cafcddd7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xaspaze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xaspaze.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9426cf75-e45f-5b33-9cbc-4922d31fdbc5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xbitspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xbitspin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ec36f22-d778-59f0-92ef-04e208632361","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xerowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xerowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b500679d-846a-5203-ad40-2992ce1e56b0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xgameon.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xgameon.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1871859a-cb09-57bb-a74a-cbf535b40812","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xhodes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xhodes.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dde7fe7-9449-53a8-8360-4c9ed1b8f806","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xmagnetic-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xmagnetic-swap.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3493feee-6684-5cd4-a5eb-527b7d9a73a4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xopeu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xopeu.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab5f8ca-3619-5f47-96e5-5e6b1b675c58","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xorawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xorawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebc1bee-077c-5b50-8894-e67513949a22","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xrpl-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xrpl-dex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--338ce102-c56d-594d-ae7c-0b25143e6bcc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xrpl-dex.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xrpl-dex.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0862d488-8c4a-5003-a3d6-887391aa5830","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: xslot-giris.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'xslot-giris.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0de8bf2-ffd5-5474-8b6b-ab95f3904ab3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yahosbddu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yahosbddu.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80fcbe4-1868-5b10-8d77-ba4f2a5d6d42","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yakobet-mx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yakobet-mx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cde208-7e25-555e-a183-159847ae2463","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yamawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yamawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd54a51-a33e-54f2-84ab-898b536e3b76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yecas.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yecas.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a603647-45c7-563b-8f22-892f2febbd1d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yeni-madridbet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yeni-madridbet.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c0cb1e-70b2-5a04-a41f-e5454187b99d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yeninesildenemebonusu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yeninesildenemebonusu.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f4ce29-7697-55ba-86f4-ebfc4df21542","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yenisite.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yenisite.ink']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e4a52ca-71dc-5503-a2b8-add92ae53611","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yenisite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yenisite.pro']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2614b511-6440-51b7-be65-8adb332a85ee","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yepp-casino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yepp-casino.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea438d76-2acd-5f41-8491-d4a6fea0b26d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yetaso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yetaso.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fd634e-b7f2-56fc-837f-8bd2cf72986d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yonedex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yonedex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc1f9762-336e-5a47-972f-0b66f3b0aaf0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yonewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yonewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--eade2201-fb7b-51ee-8556-486c64065dc5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yourw1b2f3-see.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yourw1b2f3-see.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--06696769-598a-527e-99c7-fcfec9d52fbc","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yugewin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yugewin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc76b06a-67ef-583a-ae3f-b650206c5835","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yukle-mostbet-az.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yukle-mostbet-az.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f89da93-6b2e-5750-8863-37ee70d9538a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yumwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yumwin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fdd274b-4237-59a2-a40c-c825622e5278","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: yuzu-money.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'yuzu-money.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--564b9ace-df73-5301-9b22-24956e86f0c2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zaawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zaawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2667832-d263-5a3a-be53-7bab4ab8ac97","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zaewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zaewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1513e4e-8e2c-5e81-8483-98cfbd14c005","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zaogax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zaogax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef95ca49-4e71-59bb-8700-f4a299c61748","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zaupux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zaupux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--118d8bf5-9723-54e5-9c0d-29cb832622be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zawau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zawau.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef545c8c-5d9a-5210-a7b0-f4e8a0fa2649","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zealpraxis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zealpraxis.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--436e0900-23c8-583c-a965-bd3470df23cf","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeapex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeapex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--729bdc66-e107-5efe-809b-d1aa817c15d8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeazax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeazax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--558e9ac4-bc1b-551f-8bfa-def494851623","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zekume.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zekume.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--776d39c3-2134-537c-bafd-20435e8aa7ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zenarex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zenarex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a074e7e2-2e8a-5fce-bef8-3ff305e37353","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zenawex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zenawex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be33d62-f3a7-5be1-9831-50f0c9a66d14","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zenexswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zenexswap.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8576ef6-af7e-5129-8eff-6905c7785d3f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zenowinner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zenowinner.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4294e0-a36a-5631-b88f-178d5dcaa3de","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zenvabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zenvabet.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8c3758-b579-5a52-81bb-94f2a3faf437","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeodox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeodox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c7d3077-37d5-5d2a-8363-5253f43fbb5c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeopox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeopox.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--537c47b5-2d26-58e5-8a17-6c7b6cc5587c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeovux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeovux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe6c939-d628-5811-a9f3-76f5ba2a70ec","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zesowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zesowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7593ef7-2e90-5830-9938-e21c7f08abf8","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeufax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeufax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--51721793-5b4b-539e-95bc-abd89e124206","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeumex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeumex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3febbea-676e-5714-96c0-f45d093205a9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zeunax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zeunax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9aee97-740c-50e2-a09e-ce885ad18275","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromax-azithromycin-buy.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromax-azithromycin-buy.info']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2745ed77-12a7-565d-98b8-8b6326e5db76","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromax-azithromycin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromax-azithromycin.net']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4597aead-81dd-53b1-8d34-e890c2d0fa7a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromax250mgazithromycin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromax250mgazithromycin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e442fe8-28e7-539d-8c6c-2c464822805c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromaxazithromycin24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromaxazithromycin24.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f13e8d-cd9d-5e6e-ad1d-7c2b148a17aa","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromaxbuyazithromycin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromaxbuyazithromycin.org']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--09837eb3-2af8-5b64-b68a-39a633b88613","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zithromaxpurchaseazithromycin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zithromaxpurchaseazithromycin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8378d9-552f-5122-b7d6-99562a45986d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zlottgirdim.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zlottgirdim.icu']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--660047fe-98e7-5b16-b1d9-ac7f19b0b1b1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zoabux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zoabux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2270f2b1-d048-5ac4-ba10-fbe8e2381d10","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zoadux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zoadux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5375cd-6e81-5a32-930c-a8d443543b2a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zoawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zoawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c50b142-9dc7-5ca8-95f4-d69fd00c4c58","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zodawin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zodawin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2731f26-0f36-552e-a3af-42e9aa4f9ee5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zoekex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zoekex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e8839b-78e8-52db-9805-92979210b063","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zoemux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zoemux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd47f6a-64bf-5b28-a754-2837545ee524","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zokups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zokups.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dde24fa-f6f3-5138-90bd-667991a517f3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zonewex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zonewex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--704e5c69-4bfb-594a-82ec-902e5c3c3f7a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zooparkko.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zooparkko.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--541ca69d-e423-547b-935c-84d3d43eab52","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zopiclonebuyuk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zopiclonebuyuk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31e6184-374d-588c-90ac-8c9d4648e6a0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zopiclones4uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zopiclones4uk.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--96077d5e-bbe9-5418-a7de-8d6bb9076444","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zosanx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zosanx.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--66159776-cb0a-57bf-9196-72269cc8d3e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zuacex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zuacex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--212f381a-c2b8-5d1f-8bcc-9140f7fd5850","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zuakex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zuakex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9600b9ad-dd13-5244-8342-30cf84fe33f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zuerux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zuerux.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6feaef-cf95-5950-be8f-9665a03beee3","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zumareservationgr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zumareservationgr.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--99c735a4-d07e-5be8-bb1a-e3575c799809","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zumibi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zumibi.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b752d3-2d40-5b7a-9ed9-db48cf80cf56","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zumowex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zumowex.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8f305a-7158-52e3-b671-fae35d9213da","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zumubs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zumubs.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--3290502e-5e89-54f7-9728-c307c536be7a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zunrub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zunrub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0de7c50-69f6-54a6-8632-6d11534dfe5b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zuosax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zuosax.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f0c922-c266-5ccc-a80f-8801c3bd7fc5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zurnub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zurnub.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--82ecbd41-333f-51c2-a3ca-bcb354455da5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Malicious domain: zynowin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'zynowin.com']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["phishing","registrar-abuse"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4118c390-5b1a-5eaa-b5d2-a2fdecf86e36","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 188.114.97.3 (851 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.97.3']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--574c3c36-617b-5fd4-93e1-82197f702a3c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 188.114.96.3 (836 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '188.114.96.3']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--193cec07-958f-515b-bebc-6526e609b659","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 64.176.195.8 (123 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '64.176.195.8']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b102e04-33f7-53f5-aa88-d10fb3542346","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 45.77.102.235 (109 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.77.102.235']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1884c95-e90c-51a4-83b7-b06f0ab20055","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 45.77.200.164 (109 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.77.200.164']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e9e6772-7bcf-5f31-a1f6-944cd937fb4d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 149.28.42.111 (107 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.28.42.111']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea4be6-8d10-5d6b-ac2d-f6fbdb4e158f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 149.28.63.113 (102 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.28.63.113']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcbe56db-1b1c-5465-9692-0ba59c6e4a01","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 45.77.110.111 (77 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.77.110.111']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea58aaa5-5819-5a6a-9478-4ebc9ccfc478","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 186.2.175.35 (24 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '186.2.175.35']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9d6eba5-bcae-52f9-b95a-03d92d846cea","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 89.117.51.233 (18 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '89.117.51.233']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f443fe2-779a-59bf-ad21-9abffd64d300","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 79.133.41.61 (16 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '79.133.41.61']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c124bb66-65f9-50e4-a043-db748aa5c234","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 38.180.49.33 (16 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '38.180.49.33']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc09dc2d-aa8a-5b59-8221-25bfca7b6eed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 91.199.133.247 (13 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.199.133.247']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b97e51a5-d8e0-5ad6-a628-4e948e0bc097","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 216.150.1.1 (12 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.150.1.1']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b9bde8c-51bc-5e20-a2d6-8b080648c8bb","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.21.14.189 (12 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.21.14.189']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d6a213f-838b-5bc3-afb9-5cbd4e756889","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.160.41 (10 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.160.41']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e995947-67d1-5831-9f5f-391d39334a48","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.141.12 (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.141.12']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a93851-1c37-5e9d-9a5b-07a476383ce7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 216.198.79.1 (9 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.198.79.1']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcf46a19-613b-5202-a372-525795c31e13","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.168.101.28 (8 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.168.101.28']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c25bfea-b6df-5574-ab09-cab260b0c1e4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 150.171.73.13 (8 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '150.171.73.13']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--426e9b79-3102-5100-80c6-2aaec54056ba","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 150.171.74.13 (8 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '150.171.74.13']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--906f8428-646f-533b-abde-9e47ac35535b","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 185.153.231.141 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.153.231.141']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b627f0dd-d019-5070-86d0-00a5b20e781d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 23.227.38.65 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '23.227.38.65']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae06db0d-1dae-589c-9618-fad94b3cd3d7","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.204.91 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.204.91']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33264d8d-e143-5ac0-a745-0216f5edb1f9","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.21.58.179 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.21.58.179']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--da78e7c5-30d8-51ee-bffd-d799934fa88c","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 185.158.133.1 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.158.133.1']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d714bd-0c2d-58ed-8d50-30c84127d788","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 186.2.163.247 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '186.2.163.247']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a4aa351-0cef-56b4-9cb9-7614f7cfb8c4","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 186.2.175.109 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '186.2.175.109']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4841ce9-cb6d-585e-aeb4-381a4375d855","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.18.21.157 (7 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.18.21.157']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--23709803-051b-5cf4-9344-9dfbdad1f217","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 216.24.57.1 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '216.24.57.1']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5937a14-aaef-5676-b37f-5714b4d97ca2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 75.2.60.5 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '75.2.60.5']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--26038926-a907-50b6-9a42-816aeaffeebd","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 45.87.42.74 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '45.87.42.74']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--471a844e-9f78-5003-9166-029c82f23745","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 91.229.239.28 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '91.229.239.28']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--2037c774-7842-5c27-a51f-15ab8d6035f1","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 5.187.3.108 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '5.187.3.108']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8cae6fb-0369-51e1-b7e5-c3c07600d75a","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.21.42.92 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.21.42.92']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b5e07d-312d-5331-9126-d1897b297ae5","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.160.118 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.160.118']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--01041332-0d9a-54cc-925e-52bb42e4e0e6","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.21.1.227 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.21.1.227']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4b530a-1f0d-5a00-a536-6abf9b8c4736","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.21.61.218 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.21.61.218']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2e0121-4217-596f-86d6-66c533302e0f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 3.71.180.249 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '3.71.180.249']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d98039f-9b0e-5a75-b2f5-2443cf3b6503","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 103.195.103.184 (6 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '103.195.103.184']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--33010530-94de-5ffb-bdc1-507a56ae022f","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 185.181.104.242 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '185.181.104.242']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d1092c1-938d-5013-ab71-1534a59e5f77","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 89.125.129.103 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '89.125.129.103']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c707366-bae9-5418-8608-f23c0b5b173d","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 35.157.26.135 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '35.157.26.135']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--046a447d-8aba-5f8f-a2a2-17ffcbcbbde0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.162.105 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.162.105']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e322790-20bd-5e06-8900-4d8620ffd2d2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 172.67.210.238 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '172.67.210.238']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e81777-b98f-5d78-86c7-fcaacef9513e","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.26.7.58 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.26.7.58']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c35bb3-854d-54b0-8950-972e23623da2","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 63.176.8.218 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '63.176.8.218']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc791a3e-7d6f-5357-aefd-3e9cd0ff8fed","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 149.154.167.99 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '149.154.167.99']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d5e07f-3783-55e2-a389-269d7f3b27be","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 104.18.20.157 (5 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '104.18.20.157']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a22dc1-f3ed-5ad6-83a9-7f25a0c3f9e0","created":"2026-11-12T00:00:00.000Z","modified":"2026-11-12T00:00:00.000Z","created_by_ref":"identity--42cd249f-3a0e-5d28-b162-1e8a81991896","name":"Shared hosting IP: 142.251.150.119 (4 domains)","indicator_types":["anomalous-activity"],"pattern":"[ipv4-addr:value = '142.251.150.119']","pattern_type":"stix","valid_from":"2026-11-12T00:00:00.000Z","labels":["shared-hosting"]}]}